The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…N/AN/A0%Oct 20, 2026
CVE-2026-91504: Oracle Corporation Oracle WebCenter Content: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91503: Oracle Database: Critical Patch Update - October 20268.1 HighN/A0%Oct 20, 2026
Oracle WebLogic: CVE-2026-91502 : Critical Patch Update7.3 HighN/A0%Oct 20, 2026
CVE-2026-91501: Oracle Corporation Oracle Identity Manager: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer)5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91499: Oracle Corporation Oracle Database Server: Vulnerability in the RDBMS component of Oracle Database Server8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-91496: Critical Patch Update7.5 HighN/A0%Oct 20, 2026
CVE-2026-91494: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)7.4 HighN/A0%Oct 20, 2026
CVE-2026-91493: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91492: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+)8.7 HighN/A0%Oct 20, 2026
CVE-2026-91489: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)7.1 HighN/A0%Oct 20, 2026
CVE-2026-91488: Oracle Corporation Oracle Identity Manager Connector: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST)7.1 HighN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91487: Vulnerability in Azul Zulu4.8 MediumN/A0%Oct 20, 2026
CVE-2026-91486: Oracle Corporation PeopleSoft Enterprise FIN General Ledger Brazil: Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General…4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91485: Oracle Corporation PeopleSoft Enterprise FIN Cash Management: Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management)3.8 LowN/A0%Oct 20, 2026
CVE-2026-91484: Java CPU October 2026 Oracle Java SE vulnerability7.5 HighN/A0%Oct 20, 2026
CVE-2026-91483: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)7.8 HighN/A0%Oct 20, 2026
CVE-2026-91482: Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing: Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder…6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91481: Oracle Corporation PeopleSoft Enterprise SCM Purchasing: Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier…5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91480: Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing: Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic…6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91479: Oracle Corporation Oracle Database Server: Vulnerability in the RDBMS component of Oracle Database Server6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91477: Vulnerability in Azul Zulu3.1 LowN/A0%Oct 20, 2026
CVE-2026-91476: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component:…5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91412: Oracle Corporation Siebel CRM End User: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91411: Vulnerability in Azul Zulu6.5 MediumN/A0%Oct 20, 2026
3001-3025 of 413119
‹›