The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-43808: Incorrect Permission Assignment for Critical Resource5.3 Medium6.9 Medium0%Sep 19, 2025
CVE-2025-9081: Authorization Bypass Through User-Controlled Key3.1 LowN/A0%Sep 19, 2025
CVE-2025-9079: Improper Limitation of a Pathname to a Restricted Directory8.0 HighN/A1%Sep 19, 2025
CVE-2025-59689: Improper Neutralization of Special Elements used in a Command6.1 MediumN/A2%Sep 19, 2025
CVE-2025-59431: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical8.9 High0%Sep 19, 2025
CVE-2025-57396: Improper Privilege Management6.5 MediumN/A0%Sep 19, 2025
CVE-2025-56762: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 19, 2025
CVE-2025-54815: Improper Control of Generation of Code8.8 HighN/A1%Sep 19, 2025
CVE-2025-54761: Improper Privilege Management8.0 HighN/A0%Sep 19, 2025
CVE-2025-52159: Use of Hard-coded Credentials8.8 HighN/A0%Sep 19, 2025
CVE-2025-43809: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Sep 19, 2025
CVE-2025-10568: Improper Neutralization of Special Elements used in an OS Command9.8 Critical5.2 Medium0%Sep 19, 2025
CVE-2025-43803: Authorization Bypass Through User-Controlled Key4.3 Medium6.9 Medium0%Sep 19, 2025
CVE-2025-34206: Incorrect Permission Assignment for Critical Resource9.8 Critical9.3 Critical1%Sep 19, 2025
CVE-2025-34204: Improper Privilege Management9.8 Critical8.7 High1%Sep 19, 2025
CVE-2025-34201: Improper Isolation or Compartmentalization7.8 High8.5 High0%Sep 19, 2025
CVE-2025-34200: Cleartext Storage of Sensitive Information7.8 High8.6 High0%Sep 19, 2025
CVE-2025-26517: Incorrect Privilege Assignment5.4 MediumN/A0%Sep 19, 2025
CVE-2025-26516: Asymmetric Resource Consumption (Amplification)5.3 MediumN/A0%Sep 19, 2025
CVE-2025-26515: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Sep 19, 2025
CVE-2025-26514: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 19, 2025
CVE-2024-13990: Improper Certificate ValidationN/A9.3 Critical1%Sep 19, 2025
CVE-2022-4980: Missing Authentication for Critical FunctionN/A9.3 Critical1%Sep 19, 2025
CVE-2025-34191: Improper Link Resolution Before File Access8.4 High8.5 High0%Sep 19, 2025
CVE-2025-34190: Missing Authentication for Critical Function7.8 High8.5 High0%Sep 19, 2025
86176-86200 of 559420