The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121509: n/a Headless CMS Plugin: A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress5.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-121580: Devolutions Server: Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an…N/AN/AN/ANov 3, 2026
CVE-2026-115878: stanfordnlp stanza: Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human…7.8 HighN/AN/ANov 3, 2026
CVE-2026-61497: hathach TinyUSB: TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser…5.2 Medium5.2 MediumN/ANov 3, 2026
CVE-2026-95777: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer3.1 LowN/AN/ANov 3, 2026
CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…3.1 LowN/AN/ANov 3, 2026
CVE-2026-95775: Hewlett Packard Enterprise (HPE) Fabric Composer: A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer3.3 LowN/AN/ANov 3, 2026
CVE-2026-95774: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer3.7 LowN/AN/ANov 3, 2026
CVE-2026-95773: Hewlett Packard Enterprise (HPE) Fabric Composer: A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer3.8 LowN/AN/ANov 3, 2026
CVE-2026-95772: Hewlett Packard Enterprise (HPE) Fabric Composer: A race condition vulnerability exists in the API of HPE Networking Fabric Composer4.2 MediumN/AN/ANov 3, 2026
CVE-2026-95771: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer4.3 MediumN/AN/ANov 3, 2026
CVE-2026-95770: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer…4.7 MediumN/AN/ANov 3, 2026
CVE-2026-95769: Hewlett Packard Enterprise (HPE) Fabric Composer: An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95768: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95767: Hewlett Packard Enterprise (HPE) Fabric Composer: An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95766: Hewlett Packard Enterprise (HPE) Fabric Composer: Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95765: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric…5.4 MediumN/AN/ANov 3, 2026
CVE-2026-95764: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer5.7 MediumN/AN/ANov 3, 2026
CVE-2026-95763: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated…5.9 MediumN/AN/ANov 3, 2026
CVE-2026-95762: Hewlett Packard Enterprise (HPE) Fabric Composer: An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain…5.9 MediumN/AN/ANov 3, 2026
CVE-2026-95761: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability exists in HPE Networking Fabric Composer5.9 MediumN/AN/ANov 3, 2026
CVE-2026-95760: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…6.4 MediumN/AN/ANov 3, 2026
CVE-2026-95759: Hewlett Packard Enterprise (HPE) Fabric Composer: Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer6.5 MediumN/AN/ANov 3, 2026
CVE-2026-95758: Hewlett Packard Enterprise (HPE) Fabric Composer: An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer6.5 MediumN/AN/ANov 3, 2026
CVE-2026-95757: Hewlett Packard Enterprise (HPE) Fabric Composer: A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer6.5 MediumN/AN/ANov 3, 2026
226-250 of 528356