The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101368: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101367: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: ADP)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101366: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: ADP)4.3 MediumN/A0%Oct 20, 2026
CVE-2026-101365: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)4.7 MediumN/A0%Oct 20, 2026
CVE-2026-101364: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101363: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Graph QL)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101362: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)6.9 MediumN/A0%Oct 20, 2026
CVE-2026-101361: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)4.2 MediumN/A0%Oct 20, 2026
CVE-2026-101360: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2025-60494: n/a: A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box…N/AN/A0%Oct 20, 2026
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…N/AN/A0%Oct 20, 2026
CVE-2026-76587: IBM Planning Analytics: IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking8.8 HighN/A1%Oct 20, 2026
CVE-2026-82891: IBM Guardium Data Protection: IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of…8.1 HighN/A0%Oct 20, 2026
CVE-2026-92559: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…9.8 CriticalN/A1%Oct 20, 2026
CVE-2026-93888: IBM Sterling Connect Direct for Unix: IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91665: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91664: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91663: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91658: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91651: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Essbase Web Platform)8.5 HighN/A0%Oct 20, 2026
CVE-2026-91647: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)8.1 HighN/A0%Oct 20, 2026
CVE-2026-91638: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91637: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91635: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)8.1 HighN/A0%Oct 20, 2026
CVE-2026-91541: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common…6.5 MediumN/A0%Oct 20, 2026
2501-2525 of 545063
‹›