The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-83375: Oracle Corporation PeopleSoft Enterprise HCM Human Resources: Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer…6.0 MediumN/AN/AOct 20, 2026
CVE-2026-83374: Oracle Corporation: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…5.9 MediumN/AN/AOct 20, 2026
CVE-2026-83373: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)3.0 LowN/AN/AOct 20, 2026
CVE-2026-83372: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)5.4 MediumN/AN/AOct 20, 2026
CVE-2026-83371: Oracle Corporation Oracle HRMS (UK): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations)5.4 MediumN/AN/AOct 20, 2026
CVE-2026-83370: Oracle Corporation Sourcing: Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions)7.5 HighN/AN/AOct 20, 2026
CVE-2026-83367: Oracle Corporation Oracle Shipping Execution: Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events)7.4 HighN/AN/AOct 20, 2026
CVE-2026-83366: Oracle Corporation Oracle Shipping Execution: Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events)7.4 HighN/AN/AOct 20, 2026
CVE-2026-83363: Oracle Corporation Oracle Contract Lifecycle Management for Public Sector: Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite…8.8 HighN/AN/AOct 20, 2026
CVE-2026-83361: Oracle Corporation Oracle Contract Lifecycle Management for Public Sector: Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite…8.1 HighN/AN/AOct 20, 2026
CVE-2026-83360: Oracle Corporation Oracle HRMS (Republic of Korea): Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-83359: Oracle Corporation Oracle HRMS (India): Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-83358: Oracle Corporation Oracle HRMS (Norway): Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-83139: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-82891: IBM Guardium Data Protection: IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of…8.1 HighN/AN/AOct 20, 2026
CVE-2026-81212: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared…10.0 CriticalN/AN/AOct 20, 2026
CVE-2026-76587: IBM Planning Analytics: IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking8.8 HighN/AN/AOct 20, 2026
CVE-2026-73964: Oracle Corporation Oracle Database Server: Vulnerability in the RDBMS component of Oracle Database Server2.7 LowN/AN/AOct 20, 2026
CVE-2026-70869: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker)4.7 MediumN/AN/AOct 20, 2026
CVE-2026-70860: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component:…5.9 MediumN/AN/AOct 20, 2026
CVE-2026-60968: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment…6.0 MediumN/AN/AOct 20, 2026
CVE-2026-60964: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query)1.9 LowN/AN/AOct 20, 2026
CVE-2026-60887: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover)3.8 LowN/AN/AOct 20, 2026
CVE-2026-60885: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications)6.8 MediumN/AN/AOct 20, 2026
CVE-2026-60882: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework)5.3 MediumN/AN/AOct 20, 2026
576-600 of 407346