The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-12449: Missing Authorization5.4 MediumN/A0%Jan 7, 2026
CVE-2025-12030: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Jan 7, 2026
CVE-2025-11877: Missing Authorization7.5 HighN/A0%Jan 7, 2026
CVE-2025-11235: Unverified Password Change3.7 LowN/A0%Jan 7, 2026
CVE-2025-0980: Improper Access Control6.4 MediumN/A0%Jan 7, 2026
CVE-2024-14020: Improperly Controlled Modification of Object Prototype Attributes5.0 Medium2.3 Low0%Jan 7, 2026
CVE-2025-31642: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jan 7, 2026
CVE-2025-31051: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Jan 7, 2026
CVE-2025-15471: Improper Neutralization of Special Elements used in an OS Command9.8 Critical8.9 High2%Jan 7, 2026
CVE-2025-14612: Insecure Temporary File6.7 Medium5.4 Medium0%Jan 7, 2026
CVE-2025-14605: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Jan 7, 2026
CVE-2025-14599: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Jan 7, 2026
CVE-2025-14596: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Jan 7, 2026
CVE-2026-21492: Unchecked Return Value5.5 MediumN/A0%Jan 6, 2026
CVE-2025-30996: Unrestricted Upload of File with Dangerous Type9.9 CriticalN/A0%Jan 6, 2026
CVE-2025-30631: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jan 6, 2026
CVE-2025-29004: Incorrect Privilege Assignment8.8 HighN/A0%Jan 6, 2026
CVE-2025-13744: Improper Neutralization of Input During Web Page Generation5.4 Medium8.4 High0%Jan 6, 2026
CVE-2025-7048: Buffer Access with Incorrect Length Value4.3 Medium5.3 Medium0%Jan 6, 2026
CVE-2023-5069: Undefined Security WeaknessN/AN/AN/AJan 6, 2026
CVE-2026-21494: Heap-based Buffer Overflow6.1 MediumN/A0%Jan 6, 2026
CVE-2026-21491: Heap-based Buffer Overflow6.1 MediumN/A0%Jan 6, 2026
CVE-2026-21490: Heap-based Buffer Overflow6.1 MediumN/A0%Jan 6, 2026
CVE-2026-0641: Improper Neutralization of Special Elements used in a Command8.8 High2.1 Low3%Jan 6, 2026
CVE-2025-32304: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Jan 6, 2026
89551-89575 of 417096