The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-90725: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…4.9 MediumN/AN/AOct 27, 2026
CVE-2026-117503: a2aproject a2a-go: A vulnerability was determined in a2aproject a2a-go up to 2.4.05.3 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-68866: Dell PowerProtect Data Domain: PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through…6.5 MediumN/AN/AOct 27, 2026
CVE-2026-90726: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…6.0 MediumN/AN/AOct 27, 2026
CVE-2026-90727: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…3.8 LowN/AN/AOct 27, 2026
CVE-2026-94347: Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions…7.2 HighN/AN/AOct 27, 2026
CVE-2026-10537: BMC: A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow…5.3 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-94346: Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions…7.2 HighN/AN/AOct 27, 2026
CVE-2026-16307: Netiket Information Technologies EdoWEB: Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-92546: Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally: Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc7.5 HighN/AN/AOct 27, 2026
CVE-2026-65151: NVIDIA NeMo Agent Toolkit: NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue8.4 HighN/AN/AOct 27, 2026
CVE-2026-65145: NVIDIA NeMo Agent Toolkit: NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-65120: NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery7.1 HighN/AN/AOct 27, 2026
CVE-2026-65119: NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an…8.4 HighN/AN/AOct 27, 2026
CVE-2026-47486: NVIDIA PhysX: NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write7.8 HighN/AN/AOct 27, 2026
CVE-2026-24269: NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery7.1 HighN/AN/AOct 27, 2026
CVE-2026-15586: İdvlabs Software and Consulting Services Inc. Ontime: Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc5.3 MediumN/AN/AOct 27, 2026
CVE-2026-116627: Devolutions PowerShell Universal: Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in…N/AN/AN/AOct 27, 2026
CVE-2026-114409: Docker Docker Desktop: Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local…N/A5.7 MediumN/AOct 27, 2026
CVE-2026-107590: Qt: An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module…N/A1.9 LowN/AOct 27, 2026
CVE-2026-100164: Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis: Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co7.5 HighN/AN/AOct 27, 2026
CVE-2026-12887: Octopus Deploy Octopus Server: In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a…N/A5.1 MediumN/AOct 27, 2026
CVE-2026-117603: spesmilo electrum: Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows…4.3 Medium9.3 CriticalN/AOct 27, 2026
CVE-2026-117602: spesmilo electrum: Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's…8.4 High8.6 HighN/AOct 27, 2026
CVE-2026-117601: spesmilo electrum: Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing…7.5 High9.3 CriticalN/AOct 27, 2026
1-25 of 522616
›