Skip to content
Rapid7 Vulnerability & Exploit Database

Rapid7 Vulnerability & Exploit Database

Rapid7 • September 26, 2026

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Critical GitLab Path Traversal Exploited in the Wild

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVE-2025-58002: Improper Neutralization of Input During Web Page Generation

CVE-2025-58001: Improper Neutralization of Input During Web Page Generation

CVE-2025-57999: Improper Neutralization of Input During Web Page Generation

CVE-2025-57998: Improper Neutralization of Input During Web Page Generation

CVE-2025-57996: Improper Neutralization of Input During Web Page Generation

CVE-2025-57994: Authorization Bypass Through User-Controlled Key

CVE-2025-57993: Improper Neutralization of Input During Web Page Generation

CVE-2025-57992: Cross-Site Request Forgery (CSRF)

CVE-2025-57989: Improper Neutralization of Input During Web Page Generation

CVE-2025-57986: Improper Neutralization of Input During Web Page Generation

CVE-2025-57984: Server-Side Request Forgery (SSRF)

CVE-2025-57981: Improper Neutralization of Input During Web Page Generation

CVE-2025-57980: Improper Neutralization of Input During Web Page Generation

CVE-2025-57979: Improper Neutralization of Input During Web Page Generation

CVE-2025-57978: Cross-Site Request Forgery (CSRF)

CVE-2025-57977: Cross-Site Request Forgery (CSRF)