The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-9906: Deserialization of Untrusted Data7.3 High8.6 High0%Sep 19, 2025
CVE-2025-9905: Improper Control of Dynamically-Managed Code Resources7.3 High7.3 High0%Sep 19, 2025
CVE-2025-10647: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Sep 19, 2025
CVE-2025-7702: URL Redirection to Untrusted Site4.7 MediumN/A0%Sep 19, 2025
CVE-2025-7403: Write-what-where Condition7.6 HighN/A0%Sep 19, 2025
CVE-2025-5948: Authorization Bypass Through User-Controlled Key9.8 CriticalN/A0%Sep 19, 2025
CVE-2025-10458: Improper Handling of Length Parameter Inconsistency7.6 HighN/A0%Sep 19, 2025
CVE-2025-10457: Improperly Implemented Security Check for Standard4.3 MediumN/A0%Sep 19, 2025
CVE-2025-10456: Integer Overflow or Wraparound7.1 HighN/A0%Sep 19, 2025
CVE-2025-5955: Authentication Bypass Using an Alternate Path or Channel8.1 HighN/A0%Sep 19, 2025
CVE-2025-10146: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 19, 2025
CVE-2025-8487: Missing Authorization5.4 MediumN/A0%Sep 19, 2025
CVE-2025-59717: Access of Resource Using Incompatible Type5.4 MediumN/A0%Sep 19, 2025
CVE-2025-7937: Improper Verification of Cryptographic Signature7.2 HighN/A0%Sep 19, 2025
CVE-2025-59715: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 19, 2025
CVE-2025-59714: Incorrect Authorization6.5 MediumN/A0%Sep 19, 2025
CVE-2025-59713: Deserialization of Untrusted Data6.8 MediumN/A0%Sep 19, 2025
CVE-2025-59712: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 19, 2025
CVE-2025-59678: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
CVE-2025-59677: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
CVE-2025-59676: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
CVE-2025-59675: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
CVE-2025-59674: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
CVE-2025-59673: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
CVE-2025-59672: Undefined Security WeaknessN/AN/AN/ASep 19, 2025
86251-86275 of 559420