The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-79853: Hewlett Packard Enterprise (HPE) Unknown product: No description provided9.8 CriticalN/AN/AOct 22, 2026
CVE-2026-79852: Hewlett Packard Enterprise (HPE) Unknown product: No description provided9.8 CriticalN/AN/AOct 22, 2026
CVE-2026-79851: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-79850: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-79849: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-79848: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-79847: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-79846: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-79844: Hewlett Packard Enterprise (HPE) Unknown product: No description provided10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-115414: AWS aws-sam-cli: OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the…7.8 High8.4 HighN/AOct 22, 2026
CVE-2026-114613: msgpack msgpack-python: MessagePack is the serializer implementation for Python msgpack.org7.5 HighN/AN/AOct 22, 2026
CVE-2026-115519: KNIME KNIME Business Hub: Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated…N/A2.1 LowN/AOct 22, 2026
CVE-2026-115517: KNIME KNIME Business Hub: Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an…N/A6.4 MediumN/AOct 22, 2026
CVE-2026-114612: BerriAI litellm: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format9.9 CriticalN/AN/AOct 22, 2026
CVE-2026-113876: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions4.3 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-113875: SmileCDR HAPI FHIR: On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation…3.1 Low2.3 LowN/AOct 22, 2026
CVE-2026-113874: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted…8.1 High8.6 HighN/AOct 22, 2026
CVE-2026-113873: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-97635: Agent Zero: The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads8.1 High8.6 HighN/AOct 22, 2026
CVE-2026-115516: KNIME KNIME Business Hub SaaS: An incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME Business Hub…N/A6.9 MediumN/AOct 22, 2026
CVE-2026-77156: Checkmarx github.com/checkmarx/ast-cli: Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when…6.4 Medium6.3 MediumN/AOct 22, 2026
CVE-2026-108357: PHPOffice PhpSpreadsheet: PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet filesN/A8.8 HighN/AOct 22, 2026
CVE-2026-13599: ABB Ability Edgenius: Missing authentication for critical function vulnerability in ABB Ability Edgenius7.8 High5.8 MediumN/AOct 22, 2026
CVE-2026-114611: schorschii OCO-Server: OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile…9.1 CriticalN/AN/AOct 22, 2026
CVE-2026-108359: PHPOffice PhpSpreadsheet: PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet filesN/A8.7 HighN/AOct 22, 2026
151-175 of 416054
‹›