The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-95741: Hewlett Packard Enterprise (HPE) Fabric Composer: A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer8.0 HighN/AN/ANov 3, 2026
CVE-2026-95740: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated…8.0 HighN/AN/ANov 3, 2026
CVE-2026-95739: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper restriction of excessive authentication attempts vulnerability in the API of HPE Networking Fabric Composer…8.1 HighN/AN/ANov 3, 2026
CVE-2026-95738: Hewlett Packard Enterprise (HPE) Fabric Composer: Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an…8.1 HighN/AN/ANov 3, 2026
CVE-2026-95737: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the underlying operating system of HPE Networking Fabric Composer8.2 HighN/AN/ANov 3, 2026
CVE-2026-95736: Hewlett Packard Enterprise (HPE) Fabric Composer: Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer,…8.3 HighN/AN/ANov 3, 2026
CVE-2026-95735: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability exists in HPE Networking Fabric Composer8.7 HighN/AN/ANov 3, 2026
CVE-2026-95734: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an…8.8 HighN/AN/ANov 3, 2026
CVE-2026-95733: Hewlett Packard Enterprise (HPE) Fabric Composer: A vulnerability exists in a component of HPE Networking Fabric Composer9.6 CriticalN/AN/ANov 3, 2026
CVE-2026-95732: Hewlett Packard Enterprise (HPE) Fabric Composer: An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer9.6 CriticalN/AN/ANov 3, 2026
CVE-2026-95731: Hewlett Packard Enterprise (HPE) Fabric Composer: Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an…9.8 CriticalN/AN/ANov 3, 2026
CVE-2026-95730: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-95729: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A sensitive information disclosure vulnerability exists in HPE Networking VIA6.5 MediumN/AN/ANov 3, 2026
CVE-2026-95728: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client7.1 HighN/AN/ANov 3, 2026
CVE-2026-95726: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a…7.5 HighN/AN/ANov 3, 2026
CVE-2026-95725: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A command injection vulnerability exists in the VIA client for Linux7.8 HighN/AN/ANov 3, 2026
CVE-2026-95724: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA)8.1 HighN/AN/ANov 3, 2026
CVE-2026-95723: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client8.4 HighN/AN/ANov 3, 2026
CVE-2026-95722: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client8.8 HighN/AN/ANov 3, 2026
CVE-2026-93325: Docker Docker Buildx: Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches…N/A7.3 HighN/ANov 3, 2026
CVE-2026-88968: anthropics claude-code: Claude Code is an agentic coding toolN/A7.7 HighN/ANov 3, 2026
CVE-2026-88066: anthropics claude-code: Claude Desktop is Anthropic's desktop application for interacting with ClaudeN/A7.5 HighN/ANov 3, 2026
CVE-2026-63502: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline8.3 HighN/AN/ANov 3, 2026
CVE-2026-63501: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files7.5 HighN/AN/ANov 3, 2026
CVE-2026-63500: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline7.1 HighN/AN/ANov 3, 2026
276-300 of 528356
‹›