The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-95730: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-95729: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A sensitive information disclosure vulnerability exists in HPE Networking VIA6.5 MediumN/AN/ANov 3, 2026
CVE-2026-95728: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client7.1 HighN/AN/ANov 3, 2026
CVE-2026-95727: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A command injection vulnerability exists in HPE Networking VIA7.2 HighN/AN/ANov 3, 2026
CVE-2026-95726: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a…7.5 HighN/AN/ANov 3, 2026
CVE-2026-95725: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A command injection vulnerability exists in the VIA client for Linux7.8 HighN/AN/ANov 3, 2026
CVE-2026-95724: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA)8.1 HighN/AN/ANov 3, 2026
CVE-2026-95723: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client8.4 HighN/AN/ANov 3, 2026
CVE-2026-95722: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client8.8 HighN/AN/ANov 3, 2026
CVE-2026-54161: networkupstools nut: Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS,…8.1 HighN/AN/ANov 3, 2026
CVE-2026-45146: chamilo chamilo-lms: Chamilo LMS is an open-source learning management system7.2 HighN/AN/ANov 3, 2026
CVE-2026-121577: lucasrodes whatstk: Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from…N/A6.7 MediumN/ANov 3, 2026
CVE-2026-63433: franklioxygen MyTube: MyTube is a self-hosted downloader and player for several video websites6.8 MediumN/AN/ANov 3, 2026
CVE-2026-95777: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer3.1 LowN/AN/ANov 3, 2026
CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…3.1 LowN/AN/ANov 3, 2026
CVE-2026-95775: Hewlett Packard Enterprise (HPE) Fabric Composer: A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer3.3 LowN/AN/ANov 3, 2026
CVE-2026-95774: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer3.7 LowN/AN/ANov 3, 2026
CVE-2026-95773: Hewlett Packard Enterprise (HPE) Fabric Composer: A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer3.8 LowN/AN/ANov 3, 2026
CVE-2026-95772: Hewlett Packard Enterprise (HPE) Fabric Composer: A race condition vulnerability exists in the API of HPE Networking Fabric Composer4.2 MediumN/AN/ANov 3, 2026
CVE-2026-95771: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer4.3 MediumN/AN/ANov 3, 2026
CVE-2026-95770: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer…4.7 MediumN/AN/ANov 3, 2026
CVE-2026-95769: Hewlett Packard Enterprise (HPE) Fabric Composer: An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95768: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95767: Hewlett Packard Enterprise (HPE) Fabric Composer: An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95766: Hewlett Packard Enterprise (HPE) Fabric Composer: Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated…5.3 MediumN/AN/ANov 3, 2026
1-25 of 528356
›