The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-57791: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Jul 13, 2026
CVE-2026-57790: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Jul 13, 2026
CVE-2026-57789: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Jul 13, 2026
CVE-2026-57788: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Jul 13, 2026
CVE-2026-57787: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Jul 13, 2026
CVE-2026-57786: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jul 13, 2026
CVE-2026-57783: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57782: Missing Authorization5.3 MediumN/A0%Jul 13, 2026
CVE-2026-57781: Missing Authorization5.3 MediumN/A0%Jul 13, 2026
CVE-2026-57780: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 13, 2026
CVE-2026-57779: Missing Authorization5.3 MediumN/A0%Jul 13, 2026
CVE-2026-57778: Missing Authorization5.3 MediumN/A0%Jul 13, 2026
CVE-2026-57776: Missing Authorization5.3 MediumN/A0%Jul 13, 2026
CVE-2026-57774: Missing Authorization5.3 MediumN/A0%Jul 13, 2026
CVE-2026-57773: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Jul 13, 2026
CVE-2026-57772: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Jul 13, 2026
CVE-2026-57771: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Jul 13, 2026
CVE-2026-57770: Deserialization of Untrusted Data9.8 CriticalN/A1%Jul 13, 2026
CVE-2026-57768: Incorrect Privilege Assignment8.2 HighN/A0%Jul 13, 2026
CVE-2026-57745: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57744: Deserialization of Untrusted Data9.8 CriticalN/A1%Jul 13, 2026
CVE-2026-57743: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A1%Jul 13, 2026
CVE-2026-57741: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 13, 2026
CVE-2026-57740: Missing Authorization7.1 HighN/A0%Jul 13, 2026
CVE-2026-57739: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Jul 13, 2026
48951-48975 of 537999
‹›