The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-79862: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…9.6 CriticalN/A0%Oct 22, 2026
CVE-2026-79861: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79860: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79859: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79858: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-89.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79857: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79856: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79855: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79854: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79853: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79852: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-79851: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79850: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79849: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79848: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79847: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79846: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-79844: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…10.0 CriticalN/A0%Oct 22, 2026
CVE-2026-97635: Agent Zero: The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads8.1 High8.6 High0%Oct 22, 2026
CVE-2026-93336: Canonical Juju: Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…N/A7.1 High0%Oct 22, 2026
CVE-2026-77157: Missing Support for Integrity Check6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-77156: Checkmarx github.com/checkmarx/ast-cli: Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when…6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-54532: CloudPirates-io helm-charts: CloudPirates Open Source Helm Charts is a collection of Helm charts6.9 MediumN/A0%Oct 22, 2026
CVE-2026-54238: supabase realtime: Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets3.1 LowN/A0%Oct 22, 2026
CVE-2026-13599: ABB Ability Edgenius: Missing authentication for critical function vulnerability in ABB Ability Edgenius7.8 High5.8 Medium0%Oct 22, 2026
726-750 of 413119
‹›