The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115732: Perforce Puppet Enterprise: Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in…N/A9.0 CriticalN/ANov 3, 2026
CVE-2026-120734: Devolutions Server: Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and…N/AN/AN/ANov 3, 2026
CVE-2026-120715: Devolutions Server: Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier…N/AN/AN/ANov 3, 2026
CVE-2026-76894: ondata ckan-mcp-server: CKAN MCP Server is a tool for querying CKAN open data portals3.1 LowN/AN/ANov 3, 2026
CVE-2026-120733: Devolutions Server: Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier…N/AN/AN/ANov 3, 2026
CVE-2026-82155: Dell OS Recovery tool: Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability7.8 HighN/AN/ANov 3, 2026
CVE-2026-82154: Dell OS Recovery tool: Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability2.4 LowN/AN/ANov 3, 2026
CVE-2026-121509: n/a Headless CMS Plugin: A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress5.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-121580: Devolutions Server: Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an…N/AN/AN/ANov 3, 2026
CVE-2026-115878: stanfordnlp stanza: Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human…7.8 HighN/AN/ANov 3, 2026
CVE-2026-61497: hathach TinyUSB: TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser…5.2 Medium5.2 MediumN/ANov 3, 2026
CVE-2026-95777: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer3.1 LowN/AN/ANov 3, 2026
CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…3.1 LowN/AN/ANov 3, 2026
CVE-2026-95775: Hewlett Packard Enterprise (HPE) Fabric Composer: A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer3.3 LowN/AN/ANov 3, 2026
CVE-2026-95774: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer3.7 LowN/AN/ANov 3, 2026
CVE-2026-95773: Hewlett Packard Enterprise (HPE) Fabric Composer: A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer3.8 LowN/AN/ANov 3, 2026
CVE-2026-95772: Hewlett Packard Enterprise (HPE) Fabric Composer: A race condition vulnerability exists in the API of HPE Networking Fabric Composer4.2 MediumN/AN/ANov 3, 2026
CVE-2026-95771: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer4.3 MediumN/AN/ANov 3, 2026
CVE-2026-95770: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer…4.7 MediumN/AN/ANov 3, 2026
CVE-2026-95769: Hewlett Packard Enterprise (HPE) Fabric Composer: An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95768: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95767: Hewlett Packard Enterprise (HPE) Fabric Composer: An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95766: Hewlett Packard Enterprise (HPE) Fabric Composer: Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95765: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric…5.4 MediumN/AN/ANov 3, 2026
CVE-2026-95764: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer5.7 MediumN/AN/ANov 3, 2026
1-25 of 528356
›