The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-57388: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57387: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57386: Incorrect Privilege Assignment8.8 HighN/A0%Jul 13, 2026
CVE-2026-57385: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Jul 13, 2026
CVE-2026-57383: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57382: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57381: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57380: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57379: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57378: Missing Authorization7.5 HighN/A0%Jul 13, 2026
CVE-2026-57377: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57376: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57375: Missing Authorization6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57372: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Jul 13, 2026
CVE-2026-57371: Deserialization of Untrusted Data8.8 HighN/A1%Jul 13, 2026
CVE-2026-57369: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57368: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57365: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57364: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57363: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-49876: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jul 13, 2026
CVE-2026-41041: Improper Handling of URL Encoding (Hex Encoding)9.1 CriticalN/A0%Jul 13, 2026
CVE-2026-22103: Improper Neutralization of Special Elements used in a CommandN/A9.3 Critical1%Jul 13, 2026
CVE-2026-22102: Improper Input ValidationN/A9.3 Critical0%Jul 13, 2026
CVE-2026-22100: Improper Neutralization of Special Elements used in an OS CommandN/A8.6 High1%Jul 13, 2026
48851-48875 of 413321
‹›