Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the WildBlog ↗CVE details

CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the WildBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-4944: Improper Limitation of a Pathname to a Restricted Directory	8.8 High	N/A	1%	May 28, 2026
CVE-2026-49449: Exposure of Sensitive Information to an Unauthorized Actor	2.5 Low	N/A	0%	Sep 21, 2026
CVE-2026-49446: Improper Authorization	6.1 Medium	N/A	0%	Sep 15, 2026
CVE-2026-49441: External Control of File Name or Path	9.1 Critical	N/A	1%	Aug 19, 2026
CVE-2026-49447: Improper Authentication	5.3 Medium	N/A	0%	Jul 28, 2026
CVE-2026-49445: Incorrect Permission Assignment for Critical Resource	8.8 High	N/A	0%	Jul 15, 2026
CVE-2026-49440: Missing Cryptographic Step	7.4 High	N/A	0%	Jun 23, 2026
CVE-2026-49444: Improper Input Validation	8.5 High	7.1 High	0%	Jun 23, 2026
CVE-2026-49448: Improper Authentication	9.8 Critical	N/A	1%	Jun 2, 2026
CVE-2026-49443: Improper Authentication	8.8 High	N/A	0%	Jun 2, 2026