The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-26435: Improper Privilege Management7.8 HighN/A0%Sep 4, 2025
CVE-2025-26429: Improper Input Validation5.5 MediumN/A0%Sep 4, 2025
CVE-2025-26428: Authentication Bypass by Spoofing3.2 LowN/A0%Sep 4, 2025
CVE-2025-26426: Improper Input Validation5.1 MediumN/A0%Sep 4, 2025
CVE-2025-26425: Incorrect Privilege Assignment4.0 MediumN/A0%Sep 4, 2025
CVE-2025-26424: Improper Access Control4.0 MediumN/A0%Sep 4, 2025
CVE-2025-26423: Uncontrolled Resource Consumption6.2 MediumN/A0%Sep 4, 2025
CVE-2025-26422: Incorrect Execution-Assigned Permissions4.0 MediumN/A0%Sep 4, 2025
CVE-2025-26420: Improper Preservation of Permissions4.4 MediumN/A0%Sep 4, 2025
CVE-2025-22425: Incorrect Default Permissions5.1 MediumN/A0%Sep 4, 2025
CVE-2025-0087: Permission Race Condition During Resource Copy5.1 MediumN/A0%Sep 4, 2025
CVE-2025-0077: Race Condition for Write-Once Attributes4.0 MediumN/A0%Sep 4, 2025
CVE-2025-2694: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 4, 2025
CVE-2024-43184: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 4, 2025
CVE-2025-7388: Improper Neutralization of Special Elements used in a Command8.4 HighN/A0%Sep 4, 2025
CVE-2025-58064: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low0%Sep 4, 2025
CVE-2025-45805: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Sep 3, 2025
CVE-2025-55944: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 3, 2025
CVE-2025-9823: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Sep 3, 2025
CVE-2025-56608: Authentication Bypass by Spoofing4.2 MediumN/A0%Sep 3, 2025
CVE-2025-26210: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Sep 3, 2025
CVE-2025-41000: Improper Restriction of Rendered UI Layers or FramesN/A2.1 Low0%Sep 3, 2025
CVE-2025-9785: Improper Certificate ValidationN/A7.7 High0%Sep 3, 2025
CVE-2025-22442: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Sep 2, 2025
CVE-2025-22439: Missing Authorization7.3 HighN/A0%Sep 2, 2025
5151-5175 of 16544
‹›