The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-60099: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60098: Missing Authorization6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60097: Missing Authorization5.4 MediumN/A0%Sep 26, 2025
CVE-2025-60096: Missing Authorization5.4 MediumN/A0%Sep 26, 2025
CVE-2025-60095: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60094: Missing Authorization4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60093: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60092: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Sep 26, 2025
CVE-2025-59010: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Sep 26, 2025
CVE-2025-59002: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Sep 26, 2025
CVE-2025-58919: Missing Authorization5.3 MediumN/A0%Sep 26, 2025
CVE-2025-58914: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 26, 2025
CVE-2025-4957: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 26, 2025
CVE-2025-48326: Missing Authorization6.5 MediumN/A0%Sep 26, 2025
CVE-2025-48107: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 26, 2025
CVE-2025-27006: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-1862: Unrestricted Upload of File with Dangerous Type6.7 MediumN/A1%Sep 26, 2025
CVE-2025-11021: Out-of-bounds Read7.5 HighN/A1%Sep 26, 2025
CVE-2025-10871: Missing Authorization3.8 LowN/A0%Sep 26, 2025
CVE-2025-10867: Allocation of Resources Without Limits or Throttling3.5 LowN/A0%Sep 26, 2025
CVE-2025-10858: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 26, 2025
CVE-2025-60040: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-58917: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-59012: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 26, 2025
CVE-2025-59011: Missing Authorization7.5 HighN/A0%Sep 26, 2025
85726-85750 of 399998