The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-79858: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-89.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79857: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…9.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79856: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…9.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79855: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…9.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79854: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…9.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79853: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…9.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79852: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…9.8 CriticalN/A1%Oct 22, 2026
CVE-2026-79851: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79850: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79849: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79848: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79847: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79846: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-79844: Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-115519: KNIME KNIME Business Hub: Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated…N/A2.1 Low0%Oct 22, 2026
CVE-2026-115517: KNIME KNIME Business Hub: Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an…N/A6.4 Medium0%Oct 22, 2026
CVE-2026-115414: AWS aws-sam-cli: OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the…7.8 High8.4 High1%Oct 22, 2026
CVE-2026-115397: NationalSecurityAgency ghidra: Ghidra before 12.2 contains a resource allocation without limits vulnerability in…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115396: NationalSecurityAgency ghidra: Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115395: NationalSecurityAgency ghidra: Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115394: NationalSecurityAgency ghidra: Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115393: bytecodealliance wasmtime: Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type…3.8 Low1.0 Low0%Oct 22, 2026
CVE-2026-115392: bytecodealliance wasmtime: Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem…7.9 High8.8 High0%Oct 22, 2026
CVE-2026-115391: bytecodealliance wasmtime: Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in…5.8 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115390: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref…5.7 Medium6.9 Medium0%Oct 22, 2026
926-950 of 546512
‹›