The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-64610: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2025-64589: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2025-64588: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2025-64584: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2025-64542: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-76201: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Sep 8, 2026
CVE-2026-76200: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Sep 8, 2026
CVE-2026-58874: Improper Privilege Management7.8 HighN/A0%Sep 8, 2026
CVE-2026-49932: Heap-based Buffer Overflow7.8 HighN/A0%Sep 8, 2026
CVE-2026-49881: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-45528: Improper Export of Android Application Components7.3 HighN/A0%Sep 8, 2026
CVE-2026-45521: Protection Mechanism Failure3.3 LowN/A0%Sep 8, 2026
CVE-2026-45520: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28671: Time-of-check Time-of-use (TOCTOU) Race Condition3.3 LowN/A0%Sep 8, 2026
CVE-2026-28666: Incorrect Authorization8.8 HighN/A0%Sep 8, 2026
CVE-2026-28663: Incorrect Authorization7.8 HighN/A0%Sep 8, 2026
CVE-2026-28658: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28657: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28656: Improper Restriction of Rendered UI Layers or Frames7.3 HighN/A0%Sep 8, 2026
CVE-2026-28655: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28652: Missing Authorization3.1 LowN/A0%Sep 8, 2026
CVE-2026-28650: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28644: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28642: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28638: Improper Input Validation3.3 LowN/A0%Sep 8, 2026
976-1000 of 16386