Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Blog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-94275: Unknown Track Orders for WooCommerce: The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-94258: Unknown SMS Alert: The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-94246: Unknown Wallet System for WooCommerce: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-94245: Unknown Wallet System for WooCommerce: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-94244: Unknown Wallet System for WooCommerce: The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-86828: Unknown BackWPup: The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-86827: Unknown BackWPup: The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-86826: Unknown BackWPup: The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-5769: Brocade Brocade SANnav: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in…	N/A	5.6 Medium	N/A	Oct 8, 2026
CVE-2026-5049: Brocade Brocade SANnav: A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a	N/A	6.9 Medium	N/A	Oct 8, 2026
CVE-2026-5048: Brocade Brocade SANnav: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a…	N/A	6.1 Medium	N/A	Oct 8, 2026
CVE-2026-5047: Brocade Brocade SANnav: A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log…	N/A	8.2 High	N/A	Oct 8, 2026
CVE-2026-107459: Openfind SecuShare Pro: The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability	9.8 Critical	9.3 Critical	N/A	Oct 8, 2026
CVE-2026-105260: Unknown Database Addon For WPForms ( wpforms entries ): The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-105198: Unknown Appointment Booking Plugin: The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order referenced…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-105197: Unknown Appointment Booking Plugin: The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-105196: Unknown Appointment Booking Plugin: The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-105195: Unknown Booking Calendar: The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-105194: Unknown Easy Digital Downloads: The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user,…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-105193: Unknown Booking Calendar: The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-104646: Unknown Image Photo Gallery Final Tiles Grid: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-104645: Unknown Image Photo Gallery Final Tiles Grid: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-103692: Unknown Frontend Dashboard: The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-103646: Unknown Ultimate Multisite: The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is…	N/A	N/A	N/A	Oct 8, 2026
CVE-2026-103309: Unknown GPTranslate: The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not…	N/A	N/A	N/A	Oct 8, 2026

Rows per page

26-50 of 573046

‹›

MDR Buyer's Guide

Global Threat Landscape Report