Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Blog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

Blog ↗CVE details

CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-13355: Improper Privilege Management	9.8 Critical	N/A	0%	Sep 22, 2026
CVE-2026-93340: Weak Password Recovery Mechanism for Forgotten Password	6.8 Medium	7.4 High	0%	Sep 21, 2026
CVE-2026-88738: Unrestricted Upload of File with Dangerous Type	8.8 High	N/A	0%	Sep 21, 2026
CVE-2026-59814: Improper Neutralization of Input During Web Page Generation	7.6 High	N/A	0%	Sep 21, 2026
CVE-2026-79317: Insufficient Session Expiration	4.8 Medium	N/A	0%	Sep 21, 2026
CVE-2026-59816: Improper Limitation of a Pathname to a Restricted Directory	4.3 Medium	N/A	0%	Sep 21, 2026
CVE-2026-52835: Improper Limitation of a Pathname to a Restricted Directory	N/A	7.0 High	1%	Sep 21, 2026
CVE-2026-49995: Improper Neutralization of Input During Web Page Generation	N/A	4.8 Medium	1%	Sep 21, 2026
CVE-2026-94412: Missing Authorization	8.8 High	8.7 High	0%	Sep 21, 2026
CVE-2026-94411: Missing Authorization	8.8 High	8.7 High	0%	Sep 21, 2026
CVE-2026-91167: Missing Authorization	N/A	6.0 Medium	0%	Sep 21, 2026
CVE-2026-63330: Improper Authorization	7.7 High	N/A	0%	Sep 21, 2026
CVE-2026-58491: Improper Neutralization of Input During Web Page Generation	9.3 Critical	N/A	0%	Sep 21, 2026
CVE-2026-84990: Exposure of Sensitive Information to an Unauthorized Actor	8.8 High	N/A	0%	Sep 21, 2026
CVE-2026-83621: Missing Authorization	8.1 High	N/A	0%	Sep 21, 2026
CVE-2026-79920: Missing Authorization	9.9 Critical	N/A	0%	Sep 21, 2026
CVE-2026-63416: Improper Limitation of a Pathname to a Restricted Directory	3.7 Low	N/A	0%	Sep 21, 2026
CVE-2026-17050: Double Free	5.7 Medium	N/A	0%	Sep 21, 2026
CVE-2026-82412: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	0%	Sep 21, 2026
CVE-2026-80110: Incorrect Authorization	8.1 High	N/A	0%	Sep 21, 2026
CVE-2026-61628: Concurrent Execution using Shared Resource with Improper Synchronization	8.1 High	N/A	0%	Sep 21, 2026
CVE-2026-55870: Exposure of Sensitive Information to an Unauthorized Actor	N/A	2.3 Low	1%	Sep 21, 2026
CVE-2026-55625: Authorization Bypass Through User-Controlled Key	4.9 Medium	N/A	1%	Sep 21, 2026
CVE-2026-55060: Incorrect Authorization	3.7 Low	N/A	0%	Sep 21, 2026
CVE-2026-52742: Incorrect Authorization	N/A	5.1 Medium	1%	Sep 21, 2026

Rows per page

476-500 of 17396

‹›

MDR Buyer's Guide

Global Threat Landscape Report