The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-83373: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)3.0 LowN/A0%Oct 20, 2026
CVE-2026-83372: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)5.4 MediumN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83371: Critical Patch Update5.4 MediumN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83370: Critical Patch Update7.5 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83367: Critical Patch Update7.4 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83366: Critical Patch Update7.4 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83363: Critical Patch Update8.8 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83361: Critical Patch Update8.1 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83360: Critical Patch Update6.5 MediumN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-83359: Critical Patch Update6.5 MediumN/A0%Oct 20, 2026
CVE-2026-82891: IBM Guardium Data Protection: IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of…8.1 HighN/A1%Oct 20, 2026
CVE-2026-81212: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared…10.0 CriticalN/A0%Oct 20, 2026
CVE-2026-76587: IBM Planning Analytics: IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking8.8 HighN/A1%Oct 20, 2026
CVE-2026-60885: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications)6.8 MediumN/A0%Oct 20, 2026
CVE-2026-60882: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-60881: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data)6.5 MediumN/A0%Oct 20, 2026
CVE-2026-60745: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server -…4.4 MediumN/A0%Oct 20, 2026
CVE-2026-60432: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)9.8 CriticalN/A0%Oct 20, 2026
Red Hat: CVE-2026-113812: perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificatesN/AN/A0%Oct 20, 2026
CVE-2026-113776: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/A0%Oct 20, 2026
CVE-2026-113732: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/A0%Oct 20, 2026
CVE-2026-113731: djust-org djust: djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance3.3 LowN/A0%Oct 20, 2026
CVE-2026-113730: orphan-oss ognl: OGNL is an Object Graph Navigation Library for Java5.6 MediumN/A0%Oct 20, 2026
CVE-2026-113729: moov-io signedxml: Moov signedxml is a pure Go library for processing signed XML documents7.5 HighN/A0%Oct 20, 2026
CVE-2026-113728: bulwarkmail webmail: Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server7.5 HighN/A1%Oct 20, 2026
3251-3275 of 522616