The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-57367: Missing Authorization7.1 HighN/A0%Jul 23, 2026
CVE-2026-27423: Missing Authorization4.3 MediumN/A0%Jul 23, 2026
CVE-2026-27422: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27418: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27403: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 23, 2026
CVE-2026-27399: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27392: Missing Authorization4.3 MediumN/A0%Jul 23, 2026
CVE-2026-27391: Missing Authorization5.4 MediumN/A0%Jul 23, 2026
CVE-2026-27377: Missing Authorization6.7 MediumN/A0%Jul 23, 2026
CVE-2026-27372: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Jul 23, 2026
CVE-2026-27355: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27064: Unrestricted Upload of File with Dangerous Type9.1 CriticalN/A0%Jul 23, 2026
CVE-2026-25466: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-25427: Missing Authorization5.4 MediumN/A0%Jul 23, 2026
CVE-2026-25424: Missing Authorization4.3 MediumN/A0%Jul 23, 2026
CVE-2026-25405: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Jul 23, 2026
CVE-2026-24639: Server-Side Request Forgery (SSRF)4.4 MediumN/A0%Jul 23, 2026
CVE-2026-24628: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Jul 23, 2026
CVE-2026-24552: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Jul 23, 2026
CVE-2026-24537: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jul 23, 2026
CVE-2025-68081: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Jul 23, 2026
CVE-2026-64611: Loop with Unreachable Exit Condition7.5 HighN/A0%Jul 23, 2026
CVE-2026-16745: Origin Validation Error8.8 HighN/A0%Jul 23, 2026
CVE-2026-65758: Improper Access ControlN/A8.2 High0%Jul 23, 2026
CVE-2026-65757: Cross-Site Request Forgery (CSRF)8.1 HighN/A0%Jul 23, 2026
27751-27775 of 400062