The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-95742: Hewlett Packard Enterprise (HPE) Fabric Composer: An arbitrary file write vulnerability exists in the underlying operating system of HPE Networking Fabric Composer7.8 HighN/AN/ANov 3, 2026
CVE-2026-95741: Hewlett Packard Enterprise (HPE) Fabric Composer: A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer8.0 HighN/AN/ANov 3, 2026
CVE-2026-95740: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated…8.0 HighN/AN/ANov 3, 2026
CVE-2026-95739: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper restriction of excessive authentication attempts vulnerability in the API of HPE Networking Fabric Composer…8.1 HighN/AN/ANov 3, 2026
CVE-2026-95738: Hewlett Packard Enterprise (HPE) Fabric Composer: Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an…8.1 HighN/AN/ANov 3, 2026
CVE-2026-95737: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the underlying operating system of HPE Networking Fabric Composer8.2 HighN/AN/ANov 3, 2026
CVE-2026-95736: Hewlett Packard Enterprise (HPE) Fabric Composer: Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer,…8.3 HighN/AN/ANov 3, 2026
CVE-2026-95735: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability exists in HPE Networking Fabric Composer8.7 HighN/AN/ANov 3, 2026
CVE-2026-95734: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an…8.8 HighN/AN/ANov 3, 2026
CVE-2026-95733: Hewlett Packard Enterprise (HPE) Fabric Composer: A vulnerability exists in a component of HPE Networking Fabric Composer9.6 CriticalN/AN/ANov 3, 2026
CVE-2026-95732: Hewlett Packard Enterprise (HPE) Fabric Composer: An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer9.6 CriticalN/AN/ANov 3, 2026
CVE-2026-95731: Hewlett Packard Enterprise (HPE) Fabric Composer: Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an…9.8 CriticalN/AN/ANov 3, 2026
CVE-2025-71452: Vembu Technologies BDRSuite: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in…6.1 Medium5.1 MediumN/ANov 3, 2026
CVE-2026-63395: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers8.8 HighN/AN/ANov 3, 2026
CVE-2025-71451: Vembu Technologies BDRSuite: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in…6.1 Medium5.1 MediumN/ANov 3, 2026
CVE-2026-63475: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers4.3 MediumN/AN/ANov 3, 2026
CVE-2026-63476: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers4.3 MediumN/AN/ANov 3, 2026
CVE-2026-105822: TP-Link Systems Inc. Tapo Cloud Service: The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a…N/A8.3 HighN/ANov 3, 2026
CVE-2026-105821: TP-Link Systems Inc. Tapo Cloud Service: The Tapo Cloud MQTT broker contains a broken access control vulnerability in a proxy topic used by authenticated Tapo…N/A8.3 HighN/ANov 3, 2026
CVE-2026-63478: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers5.3 MediumN/AN/ANov 3, 2026
CVE-2026-63500: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline7.1 HighN/AN/ANov 3, 2026
CVE-2026-120567: MongoDB Entity Framework Core Provider: The MongoDB Entity Framework Core provider does not neutralize special elements when it places a caller-supplied value…5.4 Medium2.3 LowN/ANov 3, 2026
CVE-2026-63502: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline8.3 HighN/AN/ANov 3, 2026
CVE-2026-93325: Docker Docker Buildx: Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches…N/A7.3 HighN/ANov 3, 2026
CVE-2026-63482: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline7.5 HighN/AN/ANov 3, 2026
51-75 of 528356
‹›