The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-117695: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117694: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117693: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117692: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-115223: Unknown Smart Popup by Supsystic: The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being…4.9 MediumN/AN/AOct 28, 2026
CVE-2026-112198: Tactis NoviGest Desktop App: XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop AppN/A8.3 HighN/AOct 28, 2026
CVE-2026-112197: Tactis NoviGest Desktop App: Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI serviceN/A9.4 CriticalN/AOct 28, 2026
CVE-2026-110541: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.2 HighN/AN/AOct 28, 2026
CVE-2026-110540: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…7.1 HighN/AN/AOct 28, 2026
CVE-2026-110508: Unknown Essential Addons for Elementor: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-106648: Unknown Royal Elementor Addons: The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-103799: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…9.6 CriticalN/AN/AOct 28, 2026
CVE-2026-103792: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…9.6 CriticalN/AN/AOct 28, 2026
CVE-2026-103780: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-103779: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…8.3 HighN/AN/AOct 28, 2026
CVE-2026-103330: Unknown Sadad QA Payment: The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-103313: Unknown BitPay Gateway for WooCommerce: The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-101274: pretix: When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not…N/A6.9 MediumN/AOct 28, 2026
CVE-2026-101273: pretix: Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented…N/A5.3 MediumN/AOct 28, 2026
CVE-2026-101272: pretix: The mechanism binding files generated during a shredding process to the authentication method is not working correctly…N/A2.3 LowN/AOct 28, 2026
CVE-2025-30414: Acronis: Local privilege escalation due to improper authentication7.1 HighN/AN/AOct 28, 2026
CVE-2026-92665: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-86394: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.2 HighN/AN/AOct 28, 2026
CVE-2026-86393: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.2 HighN/AN/AOct 28, 2026
CVE-2026-86392: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…4.9 MediumN/AN/AOct 28, 2026
301-325 of 417096