The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Azul Zulu: CVE-2026-91461: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
CVE-2026-91460: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91459: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91458: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)7.8 HighN/A0%Oct 20, 2026
CVE-2026-91457: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91455: Oracle Corporation JD Edwards EnterpriseOne Tools: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech -…5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91450: Oracle Corporation Siebel CRM Deployment: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)7.4 HighN/A0%Oct 20, 2026
CVE-2026-91449: Oracle Corporation Siebel CRM Deployment: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)7.4 HighN/A0%Oct 20, 2026
CVE-2026-91448: Oracle Corporation Siebel CRM Deployment: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91447: Oracle Corporation Siebel CRM Deployment: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91412: Oracle Corporation Siebel CRM End User: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91411: Vulnerability in Azul Zulu6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91409: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
CVE-2026-91407: Oracle Corporation Oracle Identity Manager: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)8.8 HighN/A0%Oct 20, 2026
CVE-2026-91406: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…7.5 HighN/A0%Oct 20, 2026
CVE-2026-91405: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…7.5 HighN/A0%Oct 20, 2026
CVE-2026-91404: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…4.0 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91402: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91400: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
CVE-2026-91399: Oracle Corporation Primavera P6 Enterprise Project Portfolio Management: Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and…4.3 MediumN/A0%Oct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
2976-3000 of 413321
‹›