The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101378: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: ADP)4.3 MediumN/AN/AOct 20, 2026
CVE-2026-101377: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)2.7 LowN/AN/AOct 20, 2026
CVE-2026-101376: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)4.7 MediumN/AN/AOct 20, 2026
CVE-2026-101375: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)6.3 MediumN/AN/AOct 20, 2026
CVE-2026-101374: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service)5.9 MediumN/AN/AOct 20, 2026
CVE-2026-101373: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)2.4 LowN/AN/AOct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-9659: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
Red Hat: CVE-2026-94266: curl: curl: password leak in CURLINFO_EFFECTIVE_URLN/AN/AN/AOct 20, 2026
CVE-2026-94265: curl: When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously…N/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-92391: curl: curl: curl_mime_free stack overflow by recursionN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-92390: curl: curl: -J no-clobber guarantee bypassed with 103 early hintsN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-92389: curl: curl: TFTP direction confusionN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-92388: curl: curl: FTP wildcard write callback mixupN/AN/AN/AOct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-92387): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-92386): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
CVE-2026-87866: curl: When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not…N/AN/AN/AOct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-87865): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-87864: curl: IMAP APPEND plus CRLF conversion command injectionN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-87863: curl: curl: Hsts Response Erases Persisted EntriesN/AN/AN/AOct 20, 2026
Ubuntu: (Multiple Advisories) (CVE-2026-87862): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
1901-1925 of 417319
‹›