The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-90723: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-90721: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…3.4 LowN/AN/AOct 28, 2026
CVE-2026-90720: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…6.7 MediumN/AN/AOct 28, 2026
CVE-2026-90719: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-90717: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…9.1 CriticalN/AN/AOct 28, 2026
CVE-2026-86401: Dell PowerProtect Data Domain Management Center: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…2.7 LowN/AN/AOct 28, 2026
CVE-2026-86400: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-86399: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.2 HighN/AN/AOct 28, 2026
CVE-2026-86398: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…8.8 HighN/AN/AOct 28, 2026
CVE-2026-86397: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-86396: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…8.8 HighN/AN/AOct 28, 2026
CVE-2026-86395: Dell PowerProtect Data Domain Virtual Edition: Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions…7.2 HighN/AN/AOct 28, 2026
CVE-2026-16020: Fazile BACAK DefterAsist Financial Advisor Platform: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK…5.4 MediumN/AN/AOct 28, 2026
CVE-2026-92797: Memberpress: The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,…8.8 HighN/AN/AOct 28, 2026
CVE-2026-85655: shortpixel Enable Media Replace: The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…4.3 MediumN/AN/AOct 28, 2026
CVE-2026-118435: Samsung Open Source escargot: Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.5.4 MediumN/AN/AOct 28, 2026
CVE-2026-101935: echoplugins: The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected…6.1 MediumN/AN/AOct 28, 2026
CVE-2026-92098: webheadllc Webheadcoder Multi-Step Forms for Contact Form 7: The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site…6.1 MediumN/AN/AOct 28, 2026
CVE-2026-77871: saadiqbal Post Snippets – Custom WordPress Code Snippets Customizer: The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to Stored Cross-Site…6.4 MediumN/AN/AOct 28, 2026
CVE-2026-77188: xootix Waitlist Woocommerce ( Back in stock notifier ): The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting…6.4 MediumN/AN/AOct 28, 2026
CVE-2026-76780: rankingcoach: The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.66.3 MediumN/AN/AOct 28, 2026
CVE-2026-76058: odefranca PayPal Brasil para WooCommerce: The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to,…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-76005: chuck1982 WP Inventory Manager: The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_order' Shortcode…6.5 MediumN/AN/AOct 28, 2026
CVE-2026-63286: Axis Communications AB: Database backups are vulnerable to offline attacks7.1 HighN/AN/AOct 28, 2026
CVE-2026-2839: hwk-fr Advanced Custom Fields: Extended: The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering…5.3 MediumN/AN/AOct 28, 2026
576-600 of 413066