The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-21854: Improper Authentication9.8 CriticalN/A0%Jan 7, 2026
CVE-2025-66560: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jan 7, 2026
CVE-2025-66686: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 7, 2026
CVE-2025-12543: Improper Input Validation9.6 CriticalN/A1%Jan 7, 2026
CVE-2025-15479: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jan 7, 2026
CVE-2025-14842: Unrestricted Upload of File with Dangerous Type6.1 MediumN/A0%Jan 7, 2026
CVE-2025-13371: Exposure of Sensitive Information to an Unauthorized Actor8.6 HighN/A0%Jan 7, 2026
CVE-2020-36920: Incorrect Authorization8.8 High8.7 High0%Jan 6, 2026
CVE-2020-36905: Inclusion of Functionality from Untrusted Control Sphere7.5 High5.1 Medium1%Jan 6, 2026
CVE-2025-68428: Path Traversal: '.../...//'7.5 High9.2 Critical2%Jan 5, 2026
CVE-2025-66648: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 5, 2026
CVE-2025-65110: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Jan 5, 2026
CVE-2025-59158: Improper Encoding or Escaping of Output8.0 High9.4 Critical0%Jan 5, 2026
CVE-2025-68280: Improper Restriction of XML External Entity Reference6.5 MediumN/A1%Jan 5, 2026
CVE-2025-15449: Improper Limitation of a Pathname to a Restricted Directory9.1 Critical5.3 Medium1%Jan 5, 2026
CVE-2025-15448: Unrestricted Upload of File with Dangerous Type9.8 Critical5.3 Medium0%Jan 5, 2026
CVE-2026-0574: Improper Authorization6.3 Medium2.1 Low0%Jan 4, 2026
CVE-2026-21483: Improper Neutralization of Input During Web Page Generation5.4 Medium5.4 Medium0%Jan 2, 2026
CVE-2026-21452: Uncontrolled Resource Consumption7.5 HighN/A1%Jan 2, 2026
CVE-2026-21451: Improper Neutralization of Input During Web Page Generation8.4 High5.2 Medium1%Jan 2, 2026
CVE-2026-0571: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low1%Jan 2, 2026
CVE-2025-68272: Uncontrolled Resource Consumption7.5 HighN/A1%Jan 1, 2026
CVE-2021-47743: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Dec 31, 2025
CVE-2022-50802: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Dec 30, 2025
CVE-2022-50787: Improper Neutralization of Input During Web Page Generation7.2 High5.3 Medium0%Dec 30, 2025
4251-4275 of 16522
‹›