The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
Oracle E-Business Suite: CVE-2026-101853: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101852: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101813: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101809: Critical Patch Update10.0 CriticalN/A0%Oct 20, 2026
CVE-2026-101736: Oracle Corporation Primavera Unifier: Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core)7.4 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101692: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101686: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101685: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101664: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101656: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101655: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101654: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101653: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101635: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101567: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-101557: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9659: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
Red Hat: CVE-2026-94266: curl: curl: password leak in CURLINFO_EFFECTIVE_URLN/AN/A0%Oct 20, 2026
CVE-2026-94265: curl: When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously…N/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-92391: curl: curl: curl_mime_free stack overflow by recursionN/AN/A0%Oct 20, 2026
3051-3075 of 530113