Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Blog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2020-36533: Improper Authentication	3.7 Low	N/A	1%	Jun 3, 2022
CVE-2020-36532: Exposure of Sensitive Information to an Unauthorized Actor	4.3 Medium	N/A	1%	Jun 3, 2022
CVE-2020-36531: Improper Neutralization of Special Elements in Output Used by a Downstream Component	6.3 Medium	N/A	1%	Jun 3, 2022
CVE-2020-36530: Improper Neutralization of Special Elements used in an SQL Command	6.3 Medium	N/A	1%	Jun 3, 2022
CVE-2020-36529: Improper Neutralization of Special Elements used in a Command	8.8 High	N/A	4%	Jun 3, 2022
CVE-2020-36528: Improper Authentication	5.5 Medium	N/A	1%	Jun 3, 2022
CVE-2020-36527: Improper Neutralization of Input During Web Page Generation	3.5 Low	N/A	1%	Jun 3, 2022
CVE-2020-36526: Improper Neutralization of Input During Web Page Generation	3.5 Low	N/A	1%	Jun 3, 2022
CVE-2020-36525: Improper Neutralization of Input During Web Page Generation	3.5 Low	N/A	1%	Jun 3, 2022
CVE-2020-36524: Improper Neutralization of Input During Web Page Generation	3.5 Low	N/A	1%	Jun 3, 2022
CVE-2020-36523: Improper Neutralization of Input During Web Page Generation	3.5 Low	N/A	1%	Jun 3, 2022
CVE-2020-20971: Cross-Site Request Forgery (CSRF)	8.8 High	N/A	1%	Jun 1, 2022
CVE-2020-26185: Improper Input Validation	7.5 High	N/A	1%	Jun 1, 2022
CVE-2020-26184: Improper Certificate Validation	7.5 High	N/A	1%	Jun 1, 2022
CVE-2020-28246: Improper Neutralization of Special Elements in Output Used by a Downstream Component	9.8 Critical	N/A	2%	May 31, 2022
CVE-2020-4926: Missing Authorization	9.1 Critical	N/A	1%	May 24, 2022
CVE-2020-4107: Improper Access Control	8.8 High	N/A	0%	May 19, 2022
CVE-2020-14496: Undefined Security Weakness	8.3 High	N/A	1%	May 19, 2022
CVE-2020-16235: Inadequate Encryption Strength	3.8 Low	N/A	0%	May 19, 2022
CVE-2020-16231: Use of Password Hash With Insufficient Computational Effort	7.2 High	N/A	1%	May 19, 2022
CVE-2020-16209: Stack-based Buffer Overflow	9.8 Critical	N/A	2%	May 19, 2022
CVE-2020-4970: Cleartext Transmission of Sensitive Information	5.9 Medium	N/A	1%	May 19, 2022
CVE-2020-4994: Undefined Security Weakness	7.5 High	N/A	2%	May 17, 2022
CVE-2020-4957: Exposure of Sensitive Information to an Unauthorized Actor	5.3 Medium	N/A	1%	May 17, 2022
CVE-2020-22983: Server-Side Request Forgery (SSRF)	8.1 High	N/A	2%	May 13, 2022

Rows per page

1726-1750 of 21077

‹›

MDR Buyer's Guide

Global Threat Landscape Report