The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-60491: Use After Free5.5 MediumN/A0%Oct 21, 2026
CVE-2025-60490: Heap-based Buffer Overflow5.5 MediumN/A0%Oct 21, 2026
CVE-2025-60487: NULL Pointer Dereference5.5 MediumN/A0%Oct 21, 2026
CVE-2025-60478: Use After Free5.5 MediumN/A0%Oct 21, 2026
CVE-2023-7356: Undefined Security Weakness8.8 HighN/A0%Oct 21, 2026
CVE-2026-114437: Use of Less Trusted Source4.8 Medium6.3 Medium0%Oct 21, 2026
CVE-2026-114249: Improper Authorization7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-109619: Use After Free8.1 High9.2 Critical100%Oct 21, 2026
CVE-2026-104949: Missing AuthorizationN/A2.3 Low0%Oct 21, 2026
CVE-2026-104948: Missing AuthorizationN/A7.1 High0%Oct 21, 2026
CVE-2026-104947: Missing AuthorizationN/A5.3 Medium0%Oct 21, 2026
CVE-2025-71438: Out-of-bounds Read5.5 MediumN/A0%Oct 21, 2026
CVE-2025-60489: NULL Pointer Dereference5.5 MediumN/A0%Oct 21, 2026
CVE-2025-60479: NULL Pointer Dereference5.5 MediumN/A0%Oct 21, 2026
CVE-2025-0326: Insufficient Session ExpirationN/AN/A0%Oct 21, 2026
CVE-2024-7478: Observable Response Discrepancy5.8 MediumN/A0%Oct 21, 2026
CVE-2024-6423: Improper Input Validation4.0 MediumN/A0%Oct 21, 2026
CVE-2024-5563: Missing Authentication for Critical Function4.8 MediumN/A0%Oct 21, 2026
CVE-2024-5139: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 21, 2026
CVE-2024-4989: URL Redirection to Untrusted Site5.4 MediumN/A0%Oct 21, 2026
CVE-2026-109618: Use After FreeN/A9.2 Critical100%Oct 21, 2026
CVE-2026-97313: Reachable Assertion7.5 HighN/A0%Oct 21, 2026
CVE-2026-96888: NULL Pointer Dereference7.5 HighN/A0%Oct 21, 2026
CVE-2026-94300: Double Free8.1 HighN/A1%Oct 21, 2026
CVE-2026-90484: NULL Pointer Dereference6.5 MediumN/A0%Oct 21, 2026
3751-3775 of 416436