Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Blog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2025-14388: Improper Neutralization of Null Byte or NUL Character	9.8 Critical	N/A	0%	Dec 23, 2025
CVE-2025-14163: Cross-Site Request Forgery (CSRF)	4.3 Medium	N/A	0%	Dec 23, 2025
CVE-2025-14155: Missing Authorization	5.3 Medium	N/A	1%	Dec 23, 2025
CVE-2025-12934: Missing Authorization	8.1 High	N/A	0%	Dec 23, 2025
CVE-2025-68655: Undefined Security Weakness	N/A	N/A	N/A	Dec 23, 2025
CVE-2025-68654: Undefined Security Weakness	N/A	N/A	N/A	Dec 23, 2025
CVE-2025-68653: Undefined Security Weakness	N/A	N/A	N/A	Dec 23, 2025
CVE-2025-68652: Undefined Security Weakness	N/A	N/A	N/A	Dec 23, 2025
CVE-2025-68651: Undefined Security Weakness	N/A	N/A	N/A	Dec 23, 2025
CVE-2025-68650: Undefined Security Weakness	N/A	N/A	N/A	Dec 23, 2025
CVE-2025-67743: Server-Side Request Forgery (SSRF)	6.3 Medium	N/A	0%	Dec 23, 2025
CVE-2025-15034: Improper Neutralization of Special Elements used in an SQL Command	7.3 High	5.5 Medium	0%	Dec 23, 2025
CVE-2025-68615: Improper Restriction of Operations within the Bounds of a Memory Buffer	9.8 Critical	N/A	0%	Dec 23, 2025
CVE-2025-68614: Improper Neutralization of Input During Web Page Generation	4.3 Medium	N/A	0%	Dec 23, 2025
CVE-2025-68480: Asymmetric Resource Consumption (Amplification)	5.3 Medium	N/A	0%	Dec 22, 2025
CVE-2025-68476: Improper Limitation of a Pathname to a Restricted Directory	N/A	8.2 High	0%	Dec 22, 2025
CVE-2025-68475: Inefficient Regular Expression Complexity	7.5 High	N/A	0%	Dec 22, 2025
CVE-2025-67436: Improper Neutralization of Special Elements used in a Command	6.5 Medium	N/A	0%	Dec 22, 2025
CVE-2025-65857: Exposure of Private Personal Information to an Unauthorized Actor	7.5 High	N/A	0%	Dec 22, 2025
CVE-2025-65856: Missing Authentication for Critical Function	9.8 Critical	N/A	1%	Dec 22, 2025
CVE-2025-34458: Reachable Assertion	N/A	8.7 High	0%	Dec 22, 2025
CVE-2025-34457: Stack-based Buffer Overflow	N/A	8.7 High	0%	Dec 22, 2025
CVE-2023-53981: Improper Neutralization of Special Elements used in an OS Command	7.2 High	8.6 High	1%	Dec 22, 2025
CVE-2023-53980: Unrestricted Upload of File with Dangerous Type	9.8 Critical	8.7 High	0%	Dec 22, 2025
CVE-2023-53979: Improper Limitation of a Pathname to a Restricted Directory	8.8 High	8.6 High	0%	Dec 22, 2025

Rows per page

79601-79625 of 405400

‹›

MDR Buyer's Guide

Global Threat Landscape Report