The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-79857: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79856: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79855: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79854: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79853: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79852: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79851: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79850: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79849: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79848: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79847: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79846: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79844: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-97635: Agent Zero: The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads8.1 High8.6 High0%Oct 22, 2026
CVE-2026-93336: Canonical Juju: Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…N/A7.1 High0%Oct 22, 2026
CVE-2026-77157: Missing Support for Integrity Check6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-77156: Checkmarx github.com/checkmarx/ast-cli: Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when…6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-54532: CloudPirates-io helm-charts: CloudPirates Open Source Helm Charts is a collection of Helm charts6.9 MediumN/A0%Oct 22, 2026
CVE-2026-54238: supabase realtime: Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets3.1 LowN/A0%Oct 22, 2026
CVE-2026-13599: ABB Ability Edgenius: Missing authentication for critical function vulnerability in ABB Ability Edgenius7.8 High5.8 Medium0%Oct 22, 2026
CVE-2026-115516: KNIME KNIME Business Hub SaaS: An incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME Business Hub…N/A6.9 MediumN/AOct 22, 2026
CVE-2026-114611: schorschii OCO-Server: OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile…9.1 CriticalN/A0%Oct 22, 2026
CVE-2026-114610: py-pdf fpdf2: fpdf2 is a PDF creation library for Python6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114609: py-pdf fpdf2: fpdf2 is a PDF creation library for Python5.8 MediumN/A0%Oct 22, 2026
CVE-2026-113874: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted…8.1 High8.6 High0%Oct 22, 2026
726-750 of 413119
‹›