The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-101507: Oracle Corporation Oracle Trusted Answer Search: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)6.5 MediumN/A0%Oct 20, 2026
CVE-2026-101506: Oracle Corporation Oracle Trusted Answer Search: Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)7.7 HighN/A0%Oct 20, 2026
CVE-2026-101505: Oracle Corporation Oracle Trusted Answer Search: Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)8.7 HighN/A0%Oct 20, 2026
CVE-2026-101504: Oracle Corporation Oracle Trusted Answer Search: Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)7.6 HighN/A0%Oct 20, 2026
CVE-2026-101503: Oracle Corporation Oracle Trusted Answer Search: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-101502: Uncontrolled Resource Consumption5.0 MediumN/A0%Oct 20, 2026
CVE-2026-101500: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-101499: Improper Authentication9.8 CriticalN/A1%Oct 20, 2026
CVE-2026-101498: Oracle Corporation Oracle Trusted Answer Search: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)8.1 HighN/A0%Oct 20, 2026
CVE-2026-101497: Uncontrolled Resource Consumption4.3 MediumN/A0%Oct 20, 2026
CVE-2026-101495: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Oct 20, 2026
CVE-2026-101494: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)7.7 HighN/A0%Oct 20, 2026
CVE-2026-101493: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101492: Improper Access Control4.7 MediumN/A0%Oct 20, 2026
CVE-2026-101491: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query)5.0 MediumN/A0%Oct 20, 2026
CVE-2026-101490: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core)6.1 MediumN/A0%Oct 20, 2026
CVE-2026-101489: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)4.3 MediumN/A0%Oct 20, 2026
CVE-2026-101488: Missing Authentication for Critical Function6.5 MediumN/A0%Oct 20, 2026
CVE-2026-101487: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101486: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101485: Oracle Corporation Oracle Autonomous Health Framework: Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer)6.5 MediumN/A0%Oct 20, 2026
CVE-2026-101484: Improper Authentication9.8 CriticalN/A1%Oct 20, 2026
CVE-2026-101482: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-101481: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-101480: Oracle Corporation Oracle Secure Backup: Vulnerability in Oracle Secure Backup (component: NDMP daemon)5.3 MediumN/A0%Oct 20, 2026
926-950 of 13409
‹›