The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-58266: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58268: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 22, 2025
CVE-2025-58269: Use of Hard-coded Credentials5.3 MediumN/A0%Sep 22, 2025
CVE-2025-58271: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58645: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58646: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58647: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58648: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58650: Missing Authorization5.4 MediumN/A0%Sep 22, 2025
CVE-2025-58651: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58652: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58653: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58654: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58655: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58656: Use of Hard-coded Credentials5.3 MediumN/A0%Sep 22, 2025
CVE-2025-58658: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58659: Use of Hard-coded Credentials5.3 MediumN/A0%Sep 22, 2025
CVE-2025-58660: Missing Authorization5.4 MediumN/A0%Sep 22, 2025
CVE-2025-58661: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58662: Deserialization of Untrusted Data7.2 HighN/A0%Sep 22, 2025
CVE-2025-58663: Missing Authorization4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58664: Missing Authorization4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58665: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58667: Missing Authorization5.4 MediumN/A0%Sep 22, 2025
CVE-2025-58668: Missing Authorization4.3 MediumN/A0%Sep 22, 2025
86026-86050 of 552652