The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101361: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)4.2 MediumN/A0%Oct 20, 2026
CVE-2026-101360: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101359: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.3 MediumN/A0%Oct 20, 2026
CVE-2025-60496: n/a: A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box…N/AN/A0%Oct 20, 2026
CVE-2025-60494: n/a: A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box…N/AN/A0%Oct 20, 2026
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…N/AN/A0%Oct 20, 2026
CVE-2026-91412: Oracle Corporation Siebel CRM End User: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91411: Vulnerability in Azul Zulu6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91409: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
CVE-2026-91407: Oracle Corporation Oracle Identity Manager: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)8.8 HighN/A0%Oct 20, 2026
CVE-2026-91406: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…7.5 HighN/A0%Oct 20, 2026
CVE-2026-91405: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…7.5 HighN/A0%Oct 20, 2026
CVE-2026-91404: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export…4.0 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91402: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91400: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
CVE-2026-91399: Oracle Corporation Primavera P6 Enterprise Project Portfolio Management: Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and…4.3 MediumN/A0%Oct 20, 2026
CVE-2026-9659: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
Red Hat: CVE-2026-94266: curl: curl: password leak in CURLINFO_EFFECTIVE_URLN/AN/A0%Oct 20, 2026
CVE-2026-94265: curl: When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously…N/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92391: curl: curl: curl_mime_free stack overflow by recursionN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92390: curl: curl: -J no-clobber guarantee bypassed with 103 early hintsN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92389: curl: curl: TFTP direction confusionN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92388: curl: curl: FTP wildcard write callback mixupN/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-92387): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-92386): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
2976-3000 of 413321
‹›