The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-0017: Improper Authorization7.7 HighN/A0%Mar 2, 2026
CVE-2026-0015: Improper Input Validation6.2 MediumN/A0%Mar 2, 2026
CVE-2026-0014: Improper Input Validation6.2 MediumN/A0%Mar 2, 2026
CVE-2026-0013: Unintended Proxy or Intermediary8.4 HighN/A0%Mar 2, 2026
CVE-2026-0012: Improper Access Control6.2 MediumN/A0%Mar 2, 2026
CVE-2026-0011: Protection Mechanism Failure8.4 HighN/A0%Mar 2, 2026
CVE-2026-0005: Exposure of Sensitive Information to an Unauthorized Actor6.2 MediumN/A0%Mar 2, 2026
CVE-2025-48654: Externally Controlled Reference to a Resource in Another Sphere7.8 HighN/A0%Mar 2, 2026
CVE-2025-48646: Unintended Proxy or Intermediary7.8 HighN/A0%Mar 2, 2026
CVE-2025-48645: Improper Privilege Management7.8 HighN/A0%Mar 2, 2026
CVE-2025-48636: Improper Limitation of a Pathname to a Restricted Directory8.4 HighN/A0%Mar 2, 2026
CVE-2025-48635: Exposure of Sensitive Information to an Unauthorized Actor7.7 HighN/A0%Mar 2, 2026
CVE-2025-48634: Missing Authorization7.3 HighN/A0%Mar 2, 2026
CVE-2025-48619: Improper Access Control8.4 HighN/A0%Mar 2, 2026
CVE-2025-48609: Uncontrolled Resource Consumption9.1 CriticalN/A0%Mar 2, 2026
CVE-2025-48605: Protection Mechanism Failure8.4 HighN/A0%Mar 2, 2026
CVE-2025-48602: Protection Mechanism Failure8.4 HighN/A0%Mar 2, 2026
CVE-2025-48587: Improper Input Validation6.2 MediumN/A0%Mar 2, 2026
CVE-2025-48585: Improper Input Validation6.2 MediumN/A0%Mar 2, 2026
CVE-2025-48579: Unintended Proxy or Intermediary8.4 HighN/A0%Mar 2, 2026
CVE-2025-48578: Missing Authorization7.8 HighN/A0%Mar 2, 2026
CVE-2025-48577: Concurrent Execution using Shared Resource with Improper Synchronization7.4 HighN/A0%Mar 2, 2026
CVE-2025-48574: Missing Authorization8.4 HighN/A0%Mar 2, 2026
CVE-2025-32313: Out-of-bounds Write8.4 HighN/A0%Mar 2, 2026
CVE-2024-31328: Protection Mechanism Failure8.8 HighN/A0%Mar 2, 2026
3626-3650 of 16503