The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101366: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: ADP)4.3 MediumN/A0%Oct 20, 2026
CVE-2026-101365: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)4.7 MediumN/A0%Oct 20, 2026
CVE-2026-101364: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101363: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Graph QL)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101362: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)6.9 MediumN/A0%Oct 20, 2026
CVE-2026-101361: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)4.2 MediumN/A0%Oct 20, 2026
CVE-2026-101360: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101359: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.3 MediumN/A0%Oct 20, 2026
CVE-2025-60496: n/a: A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box…N/AN/A0%Oct 20, 2026
CVE-2025-60494: n/a: A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box…N/AN/A0%Oct 20, 2026
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…N/AN/A0%Oct 20, 2026
CVE-2026-91504: Oracle Corporation Oracle WebCenter Content: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91503: Oracle Database: Critical Patch Update - October 20268.1 HighN/A0%Oct 20, 2026
Oracle WebLogic: CVE-2026-91502 : Critical Patch Update7.3 HighN/A0%Oct 20, 2026
CVE-2026-91501: Oracle Corporation Oracle Identity Manager: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer)5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91499: Oracle Corporation Oracle Database Server: Vulnerability in the RDBMS component of Oracle Database Server8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-91496: Critical Patch Update7.5 HighN/A0%Oct 20, 2026
CVE-2026-91494: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)7.4 HighN/A0%Oct 20, 2026
CVE-2026-91493: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91492: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+)8.7 HighN/A0%Oct 20, 2026
CVE-2026-91489: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)7.1 HighN/A0%Oct 20, 2026
CVE-2026-91488: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST)7.1 HighN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91487: Vulnerability in Azul Zulu4.8 MediumN/A0%Oct 20, 2026
CVE-2026-91486: Oracle Corporation PeopleSoft Enterprise FIN General Ledger Brazil: Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General…4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91485: Oracle Corporation PeopleSoft Enterprise FIN Cash Management: Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management)3.8 LowN/A0%Oct 20, 2026
2976-3000 of 548240
‹›