The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-32330: Initialization of a Resource with an Insecure Default5.7 MediumN/A0%Sep 4, 2025
CVE-2025-32327: Improper Neutralization of Special Elements used in an SQL Command7.8 HighN/A0%Sep 4, 2025
CVE-2025-32326: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 4, 2025
CVE-2025-32324: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 4, 2025
CVE-2025-32323: Improper Input Validation7.8 HighN/A0%Sep 4, 2025
CVE-2025-32321: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 4, 2025
CVE-2025-26464: Protection Mechanism Failure7.8 HighN/A0%Sep 4, 2025
CVE-2025-26454: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 4, 2025
CVE-2025-22441: Unintended Proxy or Intermediary7.3 HighN/A0%Sep 4, 2025
CVE-2025-32312: Deserialization of Untrusted Data7.8 HighN/A0%Sep 4, 2025
CVE-2025-26462: Improper Privilege Management7.8 HighN/A0%Sep 4, 2025
CVE-2025-26458: Protection Mechanism Failure7.8 HighN/A0%Sep 4, 2025
CVE-2025-26456: Improper Check or Handling of Exceptional Conditions5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26453: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26452: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 4, 2025
CVE-2025-26450: Missing Authorization7.8 HighN/A0%Sep 4, 2025
CVE-2025-26445: Missing Authorization5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26444: Protection Mechanism Failure7.8 HighN/A0%Sep 4, 2025
CVE-2025-26443: Protection Mechanism Failure7.3 HighN/A0%Sep 4, 2025
CVE-2025-26442: Incorrect Authorization5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26437: Missing Authorization5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26436: Incorrect Authorization7.8 HighN/A0%Sep 4, 2025
CVE-2025-26435: Improper Privilege Management7.8 HighN/A0%Sep 4, 2025
CVE-2025-26429: Improper Input Validation5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26428: Authentication Bypass by Spoofing3.2 LowN/A0%Sep 4, 2025
5126-5150 of 16541