The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Oracle E-Business Suite: CVE-2026-101697: Critical Patch Update6.1 MediumN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101695: Critical Patch Update6.8 MediumN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101689: Critical Patch Update7.7 HighN/A0%Oct 20, 2026
Oracle MySQL Vulnerability CVE-2026-1016797.5 HighN/A0%Oct 20, 2026
CVE-2026-101587: Oracle Corporation Helidon: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101581: Oracle Corporation Helidon: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin)6.5 MediumN/A0%Oct 20, 2026
CVE-2026-101572: Oracle Corporation Helidon: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2)7.5 HighN/A0%Oct 20, 2026
CVE-2026-101569: Oracle Corporation Helidon: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits)6.5 MediumN/A0%Oct 20, 2026
CVE-2026-101520: Oracle Corporation Oracle Global Lifecycle Management NextGen OUI Framework: Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware…7.5 HighN/A0%Oct 20, 2026
CVE-2026-101508: Oracle Corporation Siebel CRM Integration: Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI)7.5 HighN/A0%Oct 20, 2026
CVE-2026-101420: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)9.6 CriticalN/A0%Oct 20, 2026
CVE-2026-101416: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin)7.5 HighN/A0%Oct 20, 2026
CVE-2026-101399: Oracle Corporation Siebel Apps - Marketing: Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101394: Oracle Corporation Siebel Apps - Marketing: Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101359: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9659: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
Red Hat: CVE-2026-94266: curl: curl: password leak in CURLINFO_EFFECTIVE_URLN/AN/A0%Oct 20, 2026
CVE-2026-94265: curl: When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously…N/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92391: curl: curl: curl_mime_free stack overflow by recursionN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92390: curl: curl: -J no-clobber guarantee bypassed with 103 early hintsN/AN/A0%Oct 20, 2026
2476-2500 of 416054
‹›