The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-79866: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-89.6 CriticalN/A0%Oct 22, 2026
CVE-2026-79865: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker…9.6 CriticalN/A0%Oct 22, 2026
CVE-2026-79864: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated…9.6 CriticalN/A0%Oct 22, 2026
CVE-2026-79863: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…9.6 CriticalN/A0%Oct 22, 2026
CVE-2026-79862: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…9.6 CriticalN/A0%Oct 22, 2026
CVE-2026-79861: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79860: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79859: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79858: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-89.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79857: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79856: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79855: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79854: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79853: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79852: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79851: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79850: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79849: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79848: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79847: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79846: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79844: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-97635: Agent Zero: The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads8.1 High8.6 High0%Oct 22, 2026
CVE-2026-93336: Canonical Juju: Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…N/A7.1 High0%Oct 22, 2026
CVE-2026-77157: Missing Support for Integrity Check6.4 Medium6.3 Medium0%Oct 22, 2026
701-725 of 410355
‹›