ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Source: Rapid7 Blog

3 items in the last 3d

Sortlatesthotimportance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllExploit / PoC 2Industry 1
SeverityAllcritical 2high 0medium 0low 0info 1source: Rapid7 Blog ✕

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) enables unauthenticated root command execution via crafted email; CISA added it to KEV.

CVE-2026-76461 is a critical SQL injection (CVSS 9.8) in Cisco AsyncOS for Secure Email Gateway allowing an unauthenticated remote attacker to execute arbitrary commands with root privileges by sending a specially crafted email through a vulnerable gateway. CISA added it to the KEV catalog on disclosure day, indicating zero-day exploitation, and Cisco PSIRT became aware of active exploitation in September 2026. No public PoC or attribution exists; fixed versions are 15.5.5-014, 16.0.4-302, and 16.5.0-780, and admins should check mail_logs for suspicious SQL statements like 'COPY.*TO PROGRAM'.

Rapid7 Blogupdated · 2h agofirst · 10h agoExploit / PoC in the wild 15 sourcesCVE-2026-76461

Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR

Rapid7 touts its listing in Forrester's Q3 2026 MDR Landscape, arguing MDR must converge with exposure management for measurable risk reduction.

Forrester's Managed Detection and Response Services Landscape, Q3 2026 names Rapid7 among notable providers and predicts MDR services will converge with exposure and posture improvement. Rapid7 pitches its exposure-informed, preemptive MDR built on its own SIEM, combining vulnerability findings and asset risk scoring with detection and response. The service includes unlimited incident response and a human-led, AI-enhanced investigation model. Forrester advises buyers to demand providers prove investigations rather than narrate dashboards.

Rapid7 Blog · 1d agoIndustry

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in GitLab CE/EE, is actively exploited and was added to CISA's KEV catalog.

GitLab patched CVE-2026-85706, a critical path traversal (CWE-22) in the repository commits API scoring CVSSv3.1 10.0, allowing unauthenticated arbitrary file reads on affected self-managed servers under certain conditions. CISA added it to the KEV catalog on September 11, 2026, citing active exploitation, with a September 14 remediation deadline and BOD 26-04 forensic triage requirements. Fixed versions are 19.1.8, 19.2.6, and 19.3.2; the release also fixes 17 other vulnerabilities including CVE-2026-87719, a CVSS 9.9 insecure deserialization flaw in GitLab EE.

Rapid7 Blogupdated · 22h agofirst · 1d agoExploit / PoC in the wild 17 sourcesCVE-2026-85706CVE-2026-877192