Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Blog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2025-14960: Improper Neutralization of Special Elements used in an SQL Command	7.3 High	5.5 Medium	0%	Dec 19, 2025
CVE-2025-14959: Improper Neutralization of Special Elements used in an SQL Command	7.3 High	5.5 Medium	0%	Dec 19, 2025
CVE-2025-14958: Heap-based Buffer Overflow	5.3 Medium	1.9 Low	0%	Dec 19, 2025
CVE-2025-68477: Server-Side Request Forgery (SSRF)	7.7 High	N/A	6%	Dec 19, 2025
CVE-2025-68457: Improper Neutralization of Input During Web Page Generation	6.1 Medium	0.6 Low	0%	Dec 19, 2025
CVE-2025-66580: Improper Control of Generation of Code	9.6 Critical	N/A	1%	Dec 19, 2025
CVE-2025-65035: Deserialization of Untrusted Data	6.4 Medium	N/A	0%	Dec 19, 2025
CVE-2025-63665: Improper Control of Generation of Code	9.8 Critical	N/A	1%	Dec 19, 2025
CVE-2025-58053: Improper Privilege Management	9.8 Critical	4.9 Medium	0%	Dec 19, 2025
CVE-2025-58052: Incorrect Authorization	8.1 High	2.1 Low	0%	Dec 19, 2025
CVE-2025-14957: NULL Pointer Dereference	3.3 Low	1.9 Low	0%	Dec 19, 2025
CVE-2025-14956: Heap-based Buffer Overflow	5.3 Medium	1.9 Low	0%	Dec 19, 2025
CVE-2025-14955: Improper Initialization	3.7 Low	2.9 Low	1%	Dec 19, 2025
CVE-2025-14812: Improper Restriction of Rendered UI Layers or Frames	7.5 High	N/A	0%	Dec 19, 2025
CVE-2025-14809: Improper Restriction of Rendered UI Layers or Frames	7.4 High	N/A	0%	Dec 19, 2025
CVE-2024-49587: Authentication Bypass by Primary Weakness	9.1 Critical	N/A	0%	Dec 19, 2025
CVE-2023-30971: DEPRECATED: Authentication Bypass Issues	6.8 Medium	N/A	0%	Dec 19, 2025
CVE-2025-67442: Improper Limitation of a Pathname to a Restricted Directory	7.6 High	N/A	1%	Dec 19, 2025
CVE-2025-67048: Undefined Security Weakness	N/A	N/A	N/A	Dec 19, 2025
CVE-2025-67047: Undefined Security Weakness	N/A	N/A	N/A	Dec 19, 2025
CVE-2025-67046: Undefined Security Weakness	N/A	N/A	N/A	Dec 19, 2025
CVE-2025-67045: Undefined Security Weakness	N/A	N/A	N/A	Dec 19, 2025
CVE-2025-67044: Undefined Security Weakness	N/A	N/A	N/A	Dec 19, 2025
CVE-2025-67043: Undefined Security Weakness	N/A	N/A	N/A	Dec 19, 2025
CVE-2025-66906: Cross-Site Request Forgery (CSRF)	6.1 Medium	N/A	0%	Dec 19, 2025

Rows per page

79726-79750 of 592967

‹›

MDR Buyer's Guide

Global Threat Landscape Report