Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild

CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild

CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-85706:Critical GitLab Path Traversal Exploited in the WildBlog ↗CVE details

CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the WildBlog ↗CVE details

CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the WildBlog ↗CVE details

CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-6658: Improper Neutralization of Input During Web Page Generation	5.4 Medium	N/A	0%	Jun 26, 2026
CVE-2026-66580: Improper Neutralization of Special Elements used in an SQL Command	8.5 High	N/A	0%	Sep 17, 2026
CVE-2026-66587: Improper Control of Filename for Include/Require Statement in PHP Program	9.8 Critical	N/A	0%	Aug 24, 2026
CVE-2026-66585: Insertion of Sensitive Information Into Sent Data	7.5 High	N/A	0%	Aug 24, 2026
CVE-2026-66584: Improper Neutralization of Input During Web Page Generation	7.1 High	N/A	0%	Aug 24, 2026
CVE-2026-66586: Improper Control of Filename for Include/Require Statement in PHP Program	6.6 Medium	N/A	0%	Aug 20, 2026
CVE-2026-66583: Deserialization of Untrusted Data	9.8 Critical	N/A	1%	Aug 20, 2026
CVE-2026-66582: Improper Neutralization of Input During Web Page Generation	7.1 High	N/A	0%	Aug 20, 2026
CVE-2026-66581: Improper Neutralization of Input During Web Page Generation	7.1 High	N/A	0%	Aug 20, 2026
CVE-2026-66589: Missing Authorization	5.4 Medium	N/A	0%	Aug 18, 2026