The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-66086: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66085: Missing Authorization4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66084: Missing Authorization4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66083: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66082: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66081: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Nov 21, 2025
CVE-2025-66079: Missing Authorization6.5 MediumN/A0%Nov 21, 2025
CVE-2025-66077: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66075: Missing Authorization4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66073: Deserialization of Untrusted Data7.2 HighN/A0%Nov 21, 2025
CVE-2025-66072: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66071: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66069: Missing Authorization4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66067: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 21, 2025
CVE-2025-66066: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 21, 2025
CVE-2025-66065: Missing Authorization6.5 MediumN/A0%Nov 21, 2025
CVE-2025-66064: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66063: Missing Authorization5.4 MediumN/A0%Nov 21, 2025
CVE-2025-66062: URL Redirection to Untrusted Site3.4 LowN/A0%Nov 21, 2025
CVE-2025-66061: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66060: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66059: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Nov 21, 2025
CVE-2025-66057: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 21, 2025
CVE-2025-66056: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Nov 21, 2025
CVE-2025-66055: Deserialization of Untrusted Data7.2 HighN/A0%Nov 21, 2025
82026-82050 of 591205