VulnTideExploited vulnerabilities, by vendor. Data as of .
Vendor

Rapid7 vulnerabilities

In CISA's KEV catalog
0 exploited vulnerabilities
CVE records, last 3 years
71 since
Rank 230 of 467 vendors on this site
Critical or high
43.7% of 71 scored records; 0 not scored

Source: CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.

  • Rapid7 has 71 CVE records published between 12 Nov 2023 and 12 Nov 2026, ranking #230 of 467 vendors on this site by that count.
  • Of the 71 with a CVSS score, 31 (43.7%) are rated critical or high; 0 (0% of all) have no CVSS score.
  • None of the CVE records attributed to Rapid7 is listed in CISA's KEV catalog as of 12 Nov 2026.

CVE records per year, by severity

CVE records published per year for Rapid7
CVE records published per year for Rapid7Stacked bar chart of CVE records attributed to Rapid7 per publication year, 2017 to 2026, split by severity. 2026 is not finished.02040602017: 13 not scored1320172018: 1 medium, low or none120182019: 4 high2019: 3 medium, low or none720192020: 4 high2020: 8 medium, low or none1220202021: 2 high2021: 4 medium, low or none620212022: 6 medium, low or none2022: 4 not scored1020222023: 6 high2023: 8 medium, low or none1420232024: 2 high2024: 5 medium, low or none720242025: 6 medium, low or none620252026: 5 critical2026: 24 high2026: 29 medium, low or none582026*CVE records published per year for Rapid7Stacked bar chart of CVE records attributed to Rapid7 per publication year, 2017 to 2026, split by severity. 2026 is not finished.02040602017: 13 not scored13’172018: 1 medium, low or none1’182019: 4 high2019: 3 medium, low or none7’192020: 4 high2020: 8 medium, low or none12’202021: 2 high2021: 4 medium, low or none6’212022: 6 medium, low or none2022: 4 not scored10’222023: 6 high2023: 8 medium, low or none14’232024: 2 high2024: 5 medium, low or none7’242025: 6 medium, low or none6’252026: 5 critical2026: 24 high2026: 29 medium, low or none58’26*

* 2026 is counted through .

Show data as a table
Severity by publication year
YearRecordsCriticalHighCritical or highNot scored
2026*5852450%0%
20256000%0%
202470228.6%0%
2023140642.9%0%
202210000%40%
202160233.3%0%
2020120433.3%0%
201970457.1%0%
20181000%0%
20171300—100%
Before 20171

"Critical or high" is the share of scored records; "Not scored" is the share of all records.

Source: CVE List, as of . About the data.

Rapid7 vulnerabilities reported exploited, not in CISA KEV

Listed in VulnCheck KEV, which cites public reports of exploitation in the wild. CISA has not confirmed these in its own catalog. Most recently listed first.

Source: VulnCheck KEV, as of ; CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.

Highest exploit-prediction scores (EPSS)

EPSS estimates the probability that a vulnerability is exploited in the next 30 days. The highest-scoring Rapid7 records today, from 1%.

Source: FIRST EPSS, as of ; CVE List, as of ; CISA KEV 2026.11.10, as of . About the data.

All vendors · KEV catalog overview