The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-57418: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57417: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57416: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57415: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57414: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57413: Server-Side Request Forgery (SSRF)6.4 MediumN/A0%Jul 13, 2026
CVE-2026-57412: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57411: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57410: Incorrect Privilege Assignment8.8 HighN/A0%Jul 13, 2026
CVE-2026-57409: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57408: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57407: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Jul 13, 2026
CVE-2026-57406: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57405: Missing Authorization7.1 HighN/A0%Jul 13, 2026
CVE-2026-57404: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57403: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57402: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57401: Improper Limitation of a Pathname to a Restricted Directory9.9 CriticalN/A1%Jul 13, 2026
CVE-2026-57400: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57399: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57398: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57396: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57395: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57394: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57393: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.5 MediumN/A0%Jul 13, 2026
48351-48375 of 418797
‹›