The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-69723: n/a: A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary…N/AN/A0%Oct 22, 2026
CVE-2025-65200: n/a: An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on…N/AN/A0%Oct 22, 2026
CVE-2022-51026: bytebase: Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 Critical1%Oct 22, 2026
CVE-2026-95721: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A memory corruption vulnerability exists in the web-based management interface of AOS-83.3 LowN/A0%Oct 22, 2026
CVE-2026-95720: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access…4.4 MediumN/A0%Oct 22, 2026
CVE-2026-95719: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an…4.9 MediumN/A0%Oct 22, 2026
CVE-2026-95718: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to…5.3 MediumN/A0%Oct 22, 2026
CVE-2026-95717: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow…5.5 MediumN/A0%Oct 22, 2026
CVE-2026-95716: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent…6.5 MediumN/A0%Oct 22, 2026
CVE-2026-95715: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated command injection vulnerability exists in the command line interface of AOS-106.8 MediumN/A0%Oct 22, 2026
CVE-2026-95714: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with…6.8 MediumN/A0%Oct 22, 2026
CVE-2026-95713: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-87.0 HighN/A0%Oct 22, 2026
CVE-2026-95712: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent…7.1 HighN/A0%Oct 22, 2026
CVE-2026-95711: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated…7.1 HighN/A0%Oct 22, 2026
CVE-2026-95710: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could…7.1 HighN/A0%Oct 22, 2026
CVE-2026-95709: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote…7.2 HighN/A0%Oct 22, 2026
CVE-2026-95708: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote…7.2 HighN/A0%Oct 22, 2026
CVE-2026-95707: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high…7.2 HighN/A0%Oct 22, 2026
CVE-2026-95706: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with…7.2 HighN/A0%Oct 22, 2026
CVE-2026-95705: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with…7.2 HighN/A0%Oct 22, 2026
CVE-2026-95704: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the web-based management interface of wireless network management systems could allow an…7.2 HighN/A0%Oct 22, 2026
CVE-2026-79956: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to…7.2 HighN/A0%Oct 22, 2026
CVE-2026-79955: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that…7.5 HighN/A0%Oct 22, 2026
CVE-2026-79895: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial…7.5 HighN/A0%Oct 22, 2026
CVE-2026-79894: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-87.5 HighN/A0%Oct 22, 2026
651-675 of 419499