The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-86384: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-86383: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through…6.8 MediumN/AN/AOct 28, 2026
CVE-2026-86380: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.2 HighN/AN/AOct 28, 2026
CVE-2026-86379: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…7.2 HighN/AN/AOct 28, 2026
CVE-2026-14571: Futurum Software Futurum Software User Authentication Module: A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation…N/A9.1 CriticalN/AOct 28, 2026
CVE-2026-105457: HAVELSAN Inc. Liman MYS: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc6.5 MediumN/AN/AOct 28, 2026
CVE-2026-90724: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-90723: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-90721: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…3.4 LowN/AN/AOct 28, 2026
CVE-2026-90720: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…6.7 MediumN/AN/AOct 28, 2026
CVE-2026-90719: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-90717: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…9.1 CriticalN/AN/AOct 28, 2026
CVE-2026-86401: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-86400: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-86399: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.2 HighN/AN/AOct 28, 2026
CVE-2026-86398: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…8.8 HighN/AN/AOct 28, 2026
CVE-2026-86397: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-86396: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…8.8 HighN/AN/AOct 28, 2026
CVE-2026-86395: Dell PowerProtect Data Domain Virtual Edition: Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…7.2 HighN/AN/AOct 28, 2026
CVE-2026-16020: Fazile BACAK DefterAsist Financial Advisor Platform: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK…5.4 MediumN/AN/AOct 28, 2026
CVE-2026-92797: Memberpress: The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,…8.8 HighN/AN/AOct 28, 2026
CVE-2026-85655: shortpixel Enable Media Replace: The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…4.3 MediumN/AN/AOct 28, 2026
CVE-2026-118435: Samsung Open Source escargot: Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.5.4 MediumN/AN/AOct 28, 2026
CVE-2026-101935: echoplugins: The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected…6.1 MediumN/AN/AOct 28, 2026
CVE-2026-92098: webheadllc Webheadcoder Multi-Step Forms for Contact Form 7: The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site…6.1 MediumN/AN/AOct 28, 2026
401-425 of 417096