The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101364: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Database Actions)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-101363: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Graph QL)5.3 MediumN/A0%Oct 20, 2026
CVE-2026-101362: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)6.9 MediumN/A0%Oct 20, 2026
CVE-2026-101361: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)4.2 MediumN/A0%Oct 20, 2026
CVE-2026-101360: Oracle Corporation Oracle REST Data Services: Vulnerability in Oracle REST Data Services (component: Core)5.4 MediumN/A0%Oct 20, 2026
CVE-2025-60494: n/a: A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box…N/AN/A0%Oct 20, 2026
CVE-2025-60475: n/a: A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows…N/AN/A0%Oct 20, 2026
CVE-2026-76587: IBM Planning Analytics: IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking8.8 HighN/A1%Oct 20, 2026
CVE-2026-82891: IBM Guardium Data Protection: IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of…8.1 HighN/A0%Oct 20, 2026
CVE-2026-92559: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…9.8 CriticalN/A1%Oct 20, 2026
CVE-2026-93888: IBM Sterling Connect Direct for Unix: IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable…7.8 HighN/A0%Oct 20, 2026
CVE-2026-91665: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91664: Oracle Corporation Oracle Essbase: Vulnerability in Oracle Essbase (component: Security)7.5 HighN/A0%Oct 20, 2026
CVE-2026-91541: Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common…6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91497: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment…5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91478: Oracle Corporation PeopleSoft Enterprise SCM Strategic Sourcing: Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic…8.8 HighN/A0%Oct 20, 2026
CVE-2026-91468: Oracle Corporation PeopleSoft Enterprise PeopleTools: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS)6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91453: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91452: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91451: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91418: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91417: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91410: Vulnerability in Azul Zulu5.3 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91396: Vulnerability in Azul Zulu6.5 MediumN/A0%Oct 20, 2026
Azul Zulu: CVE-2026-91395: Vulnerability in Azul Zulu6.5 MediumN/A0%Oct 20, 2026
2326-2350 of 418797
‹›