The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-91467: Oracle Corporation Oracle Fusion Middleware Control: Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework)6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91466: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset…6.4 MediumN/A0%Oct 20, 2026
CVE-2026-91465: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component:…7.5 HighN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91464: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91463: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91462: Vulnerability in Azul Zulu5.9 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91461: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
CVE-2026-91460: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91459: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91458: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)7.8 HighN/A0%Oct 20, 2026
CVE-2026-91412: Oracle Corporation Siebel CRM End User: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91411: Vulnerability in Azul Zulu6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91409: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
CVE-2026-91407: Oracle Corporation Oracle Identity Manager: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)8.8 HighN/A0%Oct 20, 2026
CVE-2026-91406: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…7.5 HighN/A0%Oct 20, 2026
CVE-2026-91405: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…7.5 HighN/A0%Oct 20, 2026
CVE-2026-91404: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…4.0 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91402: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91400: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
CVE-2026-91399: Oracle Corporation Primavera P6 Enterprise Project Portfolio Management: Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and…4.3 MediumN/A0%Oct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
2976-3000 of 413321
‹›