The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-60494: n/a: A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box…N/AN/AN/AOct 20, 2026
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…N/AN/AN/AOct 20, 2026
CVE-2026-91388: Oracle Corporation Siebel CRM End User: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)4.7 MediumN/AN/AOct 20, 2026
CVE-2026-87423: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System)4.5 MediumN/AN/AOct 20, 2026
CVE-2026-87422: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services)2.5 LowN/AN/AOct 20, 2026
CVE-2026-87421: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)7.1 HighN/AN/AOct 20, 2026
CVE-2026-87420: Oracle Corporation Oracle Service Bus: Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core)8.8 HighN/AN/AOct 20, 2026
CVE-2026-87419: Oracle Corporation Oracle Service Bus: Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core)8.8 HighN/AN/AOct 20, 2026
CVE-2026-87418: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment…2.5 LowN/AN/AOct 20, 2026
CVE-2026-87417: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)7.5 HighN/AN/AOct 20, 2026
CVE-2026-87416: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution)3.7 LowN/AN/AOct 20, 2026
CVE-2026-87415: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution)5.3 MediumN/AN/AOct 20, 2026
CVE-2026-87414: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)3.1 LowN/AN/AOct 20, 2026
CVE-2026-87413: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems)5.5 MediumN/AN/AOct 20, 2026
CVE-2026-87412: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution)2.7 LowN/AN/AOct 20, 2026
CVE-2026-87411: Oracle Corporation Oracle Solaris: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems)5.5 MediumN/AN/AOct 20, 2026
CVE-2026-87410: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution)6.8 MediumN/AN/AOct 20, 2026
CVE-2026-87404: Oracle Corporation Pasta: Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine)7.5 HighN/AN/AOct 20, 2026
CVE-2026-87403: Oracle Corporation Applications DBA: Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)7.1 HighN/AN/AOct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9659: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
1726-1750 of 417319
‹›