The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-61581: Inefficient Regular Expression Complexity7.5 HighN/A1%Oct 16, 2025
CVE-2025-58115: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 16, 2025
CVE-2025-58075: Missing Authorization8.1 HighN/A0%Oct 16, 2025
CVE-2025-58073: Missing Authorization8.1 HighN/A0%Oct 16, 2025
CVE-2025-54539: Deserialization of Untrusted Data9.8 CriticalN/A2%Oct 16, 2025
CVE-2025-54499: Observable Timing Discrepancy3.1 LowN/A0%Oct 16, 2025
CVE-2025-54461: Insufficient Granularity of Access Control5.3 Medium6.9 Medium0%Oct 16, 2025
CVE-2025-53858: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Oct 16, 2025
CVE-2025-41410: Missing Authorization5.4 MediumN/A0%Oct 16, 2025
CVE-2025-10545: Incorrect Authorization3.1 LowN/A0%Oct 16, 2025
CVE-2025-0277: Protection Mechanism Failure6.5 MediumN/A0%Oct 16, 2025
CVE-2025-0276: Protection Mechanism Failure6.5 MediumN/A0%Oct 16, 2025
CVE-2025-55091: Out-of-bounds Read6.5 Medium6.9 Medium0%Oct 16, 2025
CVE-2025-41443: Missing Authorization4.3 MediumN/A0%Oct 16, 2025
CVE-2025-41021: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 16, 2025
CVE-2025-41020: Authorization Bypass Through User-Controlled Key7.5 High7.1 High0%Oct 16, 2025
CVE-2025-41019: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical0%Oct 16, 2025
CVE-2025-41018: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical9.3 Critical0%Oct 16, 2025
CVE-2025-62585: Improperly Implemented Security Check for Standard7.5 HighN/A0%Oct 16, 2025
CVE-2025-62584: Origin Validation Error7.5 HighN/A0%Oct 16, 2025
CVE-2025-62583: Improperly Implemented Security Check for Standard9.8 CriticalN/A1%Oct 16, 2025
CVE-2025-55090: Out-of-bounds Read6.5 Medium6.9 Medium0%Oct 16, 2025
CVE-2025-55089: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 Critical9.2 Critical1%Oct 16, 2025
CVE-2025-55084: Buffer Over-read5.3 Medium6.9 Medium0%Oct 16, 2025
CVE-2025-10850: Use of Hard-coded Credentials9.8 CriticalN/A1%Oct 16, 2025
84126-84150 of 764060