The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-101366: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: ADP)4.3 MediumN/A0%Oct 20, 2026
CVE-2026-101364: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101363: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Graph QL)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101362: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)6.9 MediumN/A0%Oct 20, 2026
CVE-2026-101361: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)4.2 MediumN/A0%Oct 20, 2026
CVE-2026-101360: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101359: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.3 MediumN/A0%Oct 20, 2026
CVE-2025-60496: n/a: A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box…5.5 MediumN/A0%Oct 20, 2026
CVE-2025-60494: n/a: A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box…5.5 MediumN/A0%Oct 20, 2026
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91356: Oracle Corporation PeopleSoft Enterprise HCM Global Payroll Switzerland: Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component:…4.2 MediumN/A0%Oct 20, 2026
CVE-2026-91355: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean…8.4 HighN/A0%Oct 20, 2026
CVE-2026-91343: Oracle Corporation Oracle Outside In Technology: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean…8.6 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-91338: Critical Patch Update7.1 HighN/A0%Oct 20, 2026
Oracle E-Business Suite: CVE-2026-91337: Critical Patch Update7.4 HighN/A0%Oct 20, 2026
CVE-2026-91336: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91335: Vulnerability in Azul Zulu2.6 LowN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91334: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91333: Vulnerability in Azul Zulu3.7 LowN/A0%Oct 20, 2026
CVE-2026-91331: Oracle Corporation PeopleSoft Enterprise CC Common Application Objects: Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component:…3.8 LowN/A0%Oct 20, 2026
CVE-2026-91330: Oracle Corporation JD Edwards EnterpriseOne Tools: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)3.3 LowN/A0%Oct 20, 2026
CVE-2026-91329: Oracle Corporation JD Edwards EnterpriseOne Tools: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91328: Oracle Corporation JD Edwards EnterpriseOne Tools: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC)7.8 HighN/A0%Oct 20, 2026
CVE-2026-91327: Oracle Corporation JD Edwards EnterpriseOne Tools: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91326: Oracle Corporation JD Edwards EnterpriseOne Tools: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)8.8 HighN/A0%Oct 20, 2026
5401-5425 of 413066