Skip to content
RCE Vulnerabilities Discovered in Network Perimeter Devices

RCE Vulnerabilities Discovered in Network Perimeter Devices

First seen 6 Nov 2026, 15:15 UTC • • •Early signal · one source
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 6, 2026 at 15:16 UTC

Recent updates to the Metasploit Framework reveal unauthenticated remote code execution (RCE) vulnerabilities affecting major network perimeter devices, including Citrix NetScaler and Cisco Secure Email Gateway. The vulnerabilities, identified as CVE-2025-58434 and CVE-2026-39908, allow attackers to exploit unauthenticated access to take over accounts and execute arbitrary code. The CVE-2025-58434 affects Flowise versions 3.0.5 and earlier, while CVE-2026-39908 targets OpenBullet2, allowing credential disclosure via malicious UNC paths. The CVSS scores for these vulnerabilities are 9.8 and 7.1, respectively, indicating an and high severity. Security professionals are urged to apply patches and monitor for potential exploitation, as these vulnerabilities are actively being targeted. The Metasploit team encourages users to report unsupported features for future updates.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5d ago How this analysis works

Timeline

2025-09-12
CVE-2025-58434 published
CVE-2025-58434 disclosed, affecting Flowise versions 3.0.5 and earlier, with a CVSS score of 9.8.
Rapid7
2026-06-08
CVE-2026-25856 published
CVE-2026-25856 published, allowing RCE in OpenBullet2, with a CVSS score of 8.7.
Rapid7
2026-06-08
CVE-2026-39908 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-97229 published
CVE-2026-97229 published with a CVSS score of 10.0, indicating critical severity.
Rapid7

More articles in this cluster (3)

Following this threat?

Track CVE-2024-5450 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (27)

1 / 4

Common questions

Which devices are affected?
Citrix NetScaler and Cisco Secure Email Gateway are among the affected devices.
What is the severity of these vulnerabilities?
CVE-2025-58434 has a CVSS score of 9.8, while CVE-2026-39908 has a score of 7.1.
What actions should be taken?
Administrators should apply patches immediately and monitor for signs of exploitation.