The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-60662: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services)7.8 HighN/AN/AOct 20, 2026
CVE-2026-60500: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server)5.8 MediumN/AN/AOct 20, 2026
CVE-2026-60453: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System)5.3 MediumN/AN/AOct 20, 2026
CVE-2026-60432: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)9.8 CriticalN/AN/AOct 20, 2026
CVE-2026-47025: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)8.8 HighN/AN/AOct 20, 2026
CVE-2026-113812: Improper Certificate ValidationN/AN/AN/AOct 20, 2026
CVE-2026-113776: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/AN/AOct 20, 2026
CVE-2026-113732: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/AN/AOct 20, 2026
CVE-2026-113731: djust-org djust: djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance3.3 LowN/AN/AOct 20, 2026
CVE-2026-113730: orphan-oss ognl: OGNL is an Object Graph Navigation Library for Java5.6 MediumN/AN/AOct 20, 2026
CVE-2026-113729: moov-io signedxml: Moov signedxml is a pure Go library for processing signed XML documents7.5 HighN/AN/AOct 20, 2026
CVE-2026-113728: bulwarkmail webmail: Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server7.5 HighN/AN/AOct 20, 2026
CVE-2026-113727: openchoreo: OpenChoreo is a developer platform for Kubernetes7.4 HighN/AN/AOct 20, 2026
CVE-2026-113726: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/AN/AOct 20, 2026
CVE-2026-113704: a2aproject a2a-rs: A vulnerability has been found in a2aproject a2a-rs up to 0.4.37.3 High6.9 MediumN/AOct 20, 2026
CVE-2026-113344: Google Chrome: Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113343: Google Chrome: Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113342: Google Chrome: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-113341: Google Chrome: Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113340: Google Chrome: Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113339: Google Chrome: Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113338: Google Chrome: Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113337: Google Chrome: Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113336: Google Chrome: Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-113335: Google Chrome: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
876-900 of 417319