The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-49922: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-49921: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Oct 22, 2025
CVE-2025-49920: Missing Authorization5.4 MediumN/A0%Oct 22, 2025
CVE-2025-49917: Server-Side Request Forgery (SSRF)4.4 MediumN/A0%Oct 22, 2025
CVE-2025-49916: Missing Authorization8.6 HighN/A0%Oct 22, 2025
CVE-2025-49915: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 22, 2025
CVE-2025-49913: Missing Authorization5.3 MediumN/A0%Oct 22, 2025
CVE-2025-49912: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Oct 22, 2025
CVE-2025-49911: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49910: Missing Authorization8.2 HighN/A0%Oct 22, 2025
CVE-2025-49908: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49907: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-49906: Missing Authorization5.3 MediumN/A0%Oct 22, 2025
CVE-2025-49903: Missing Authorization5.3 MediumN/A0%Oct 22, 2025
CVE-2025-49901: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A0%Oct 22, 2025
CVE-2025-49899: Missing Authorization5.3 MediumN/A0%Oct 22, 2025
CVE-2025-49380: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 22, 2025
CVE-2025-49378: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 22, 2025
CVE-2025-49377: Missing Authorization6.3 MediumN/A0%Oct 22, 2025
CVE-2025-49376: Missing Authorization5.3 MediumN/A0%Oct 22, 2025
CVE-2025-49374: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Oct 22, 2025
CVE-2025-49373: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 22, 2025
CVE-2025-49060: Unrestricted Upload of File with Dangerous Type10.0 CriticalN/A0%Oct 22, 2025
CVE-2025-48338: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Oct 22, 2025
CVE-2025-48106: Unrestricted Upload of File with Dangerous Type10.0 CriticalN/A0%Oct 22, 2025
83801-83825 of 703397