The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-115509: jitsucom jitsu: Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that…4.2 Medium2.3 Low0%Oct 22, 2026
CVE-2026-115508: unclecode crawl4ai: Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API…6.5 Medium7.1 High0%Oct 22, 2026
CVE-2026-115507: go-vikunja vikunja: Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in…3.5 Low5.1 Medium0%Oct 22, 2026
CVE-2026-115506: libexpat: libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in…7.5 High8.7 High0%Oct 22, 2026
CVE-2026-115505: sahlberg libsmb2: libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap…7.6 High7.2 High0%Oct 22, 2026
CVE-2026-115504: HEASARC cfitsio: CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts…7.8 High8.5 High0%Oct 22, 2026
CVE-2026-115503: NationalSecurityAgency ghidra: Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115398: NationalSecurityAgency ghidra: Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-112332: GDATASoftwareAG motornet: Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a…7.5 High8.7 High1%Oct 22, 2026
CVE-2026-112331: GDATASoftwareAG motornet: Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce…7.5 High8.7 High1%Oct 22, 2026
CVE-2026-112330: GDATASoftwareAG motornet: Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a…7.5 High8.7 High1%Oct 22, 2026
CVE-2026-95721: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A memory corruption vulnerability exists in the web-based management interface of AOS-83.3 LowN/A0%Oct 22, 2026
CVE-2026-95720: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access…4.4 MediumN/A0%Oct 22, 2026
CVE-2026-95719: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an…4.9 MediumN/A0%Oct 22, 2026
CVE-2026-95718: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to…5.3 MediumN/A0%Oct 22, 2026
CVE-2026-95717: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow…5.5 MediumN/A0%Oct 22, 2026
CVE-2026-95716: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent…6.5 MediumN/A0%Oct 22, 2026
CVE-2026-95715: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated command injection vulnerability exists in the command line interface of AOS-106.8 MediumN/A2%Oct 22, 2026
CVE-2026-95714: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with…6.8 MediumN/A0%Oct 22, 2026
CVE-2026-95713: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-87.0 HighN/A0%Oct 22, 2026
CVE-2026-95712: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent…7.1 HighN/A0%Oct 22, 2026
CVE-2026-95711: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated…7.1 HighN/A0%Oct 22, 2026
CVE-2026-95710: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could…7.1 HighN/A0%Oct 22, 2026
CVE-2026-95709: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote…7.2 HighN/A1%Oct 22, 2026
CVE-2026-95708: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote…7.2 HighN/A1%Oct 22, 2026
826-850 of 546512
‹›