Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Blog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2021-27788: Improper Neutralization of Input During Web Page Generation	8.3 High	N/A	1%	Mar 10, 2023
CVE-2021-33360: Undefined Security Weakness	9.8 Critical	N/A	1%	Mar 10, 2023
CVE-2021-34125: Exposure of Sensitive Information to an Unauthorized Actor	7.5 High	N/A	1%	Mar 9, 2023
CVE-2021-33639: Exposed Dangerous Method or Function	7.5 High	N/A	0%	Mar 8, 2023
CVE-2021-33353: Improper Limitation of a Pathname to a Restricted Directory	9.8 Critical	N/A	2%	Mar 8, 2023
CVE-2021-33352: Unrestricted Upload of File with Dangerous Type	9.8 Critical	N/A	1%	Mar 8, 2023
CVE-2021-33351: Improper Neutralization of Input During Web Page Generation	9.0 Critical	N/A	1%	Mar 8, 2023
CVE-2021-4333: Cross-Site Request Forgery (CSRF)	6.5 Medium	N/A	0%	Mar 7, 2023
CVE-2021-4332: External Control of File Name or Path	6.5 Medium	N/A	1%	Mar 7, 2023
CVE-2021-44197: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)	6.1 Medium	N/A	0%	Mar 7, 2023
CVE-2021-44196: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)	6.1 Medium	N/A	0%	Mar 7, 2023
CVE-2021-4331: Missing Authorization	8.8 High	N/A	1%	Mar 7, 2023
CVE-2021-4330: Unrestricted Upload of File with Dangerous Type	8.8 High	N/A	2%	Mar 7, 2023
CVE-2021-23185: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-26246: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-23199: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-23212: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-23220: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-23224: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-23232: Undefined Security Weakness	9.8 Critical	N/A	N/A	Mar 7, 2023
CVE-2021-35377: Improper Neutralization of Input During Web Page Generation	6.1 Medium	N/A	0%	Mar 6, 2023
CVE-2021-36393: Improper Neutralization of Special Elements used in an SQL Command	9.8 Critical	N/A	52%	Mar 6, 2023
CVE-2021-36394: Session Fixation	9.8 Critical	N/A	7%	Mar 6, 2023
CVE-2021-36395: Uncontrolled Resource Consumption	7.5 High	N/A	1%	Mar 6, 2023
CVE-2021-36396: Server-Side Request Forgery (SSRF)	7.5 High	N/A	1%	Mar 6, 2023

Rows per page

1976-2000 of 23470

‹›

MDR Buyer's Guide

Global Threat Landscape Report