Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

When Business Email Compromise Starts Rewriting Reality

Douglas McKee, Director, Vulnerability Intelligence

Latest articles about Vulnerabilities and Exploits

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild