The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-39967: Integer Overflow or Wraparound7.8 HighN/A0%Oct 15, 2025
CVE-2025-39966: Concurrent Execution using Shared Resource with Improper Synchronization7.8 HighN/A0%Oct 15, 2025
CVE-2025-11161: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.4 MediumN/A0%Oct 15, 2025
CVE-2025-11160: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.4 MediumN/A0%Oct 15, 2025
CVE-2025-8561: Improper Neutralization of Alternate XSS Syntax6.4 MediumN/A0%Oct 15, 2025
CVE-2025-6042: Improper Privilege Management7.3 HighN/A0%Oct 15, 2025
CVE-2025-55080: Improper Handling of Parameters7.1 High7.2 High0%Oct 15, 2025
CVE-2025-31702: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Oct 15, 2025
CVE-2025-26861: Uncontrolled Search Path Element7.8 High8.5 High0%Oct 15, 2025
CVE-2025-26860: Uncontrolled Search Path Element7.8 High8.5 High0%Oct 15, 2025
CVE-2025-26859: Uncontrolled Search Path Element7.8 High8.5 High0%Oct 15, 2025
CVE-2025-11176: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 15, 2025
CVE-2025-10406: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Oct 15, 2025
CVE-2025-55079: Allocation of Resources Without Limits or Throttling5.5 Medium5.7 Medium0%Oct 15, 2025
CVE-2025-62448: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62447: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62446: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62445: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62444: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62443: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62442: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62441: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-62440: Undefined Security WeaknessN/AN/AN/AOct 15, 2025
CVE-2025-11746: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Oct 15, 2025
CVE-2025-54278: Heap-based Buffer Overflow5.5 MediumN/A0%Oct 15, 2025
84301-84325 of 677876