The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
190 Results
Vulnerabilities and Exploits
KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails
Rapid7
Vulnerabilities and Exploits
Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)
Rapid7
Vulnerabilities and Exploits
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity
Rapid7
Vulnerabilities and Exploits
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
Rapid7 Labs
Vulnerabilities and Exploits
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Rapid7
Vulnerabilities and Exploits
Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
Jonah Burgess
Vulnerabilities and Exploits
CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry
Rapid7
Vulnerabilities and Exploits
Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)
Rapid7
Vulnerabilities and Exploits
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
Rapid7
Vulnerabilities and Exploits
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
Rapid7
Vulnerabilities and Exploits
Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)
Jonah Burgess
Vulnerabilities and Exploits
CVE-2026-41940: cPanel & WHM Authentication Bypass
Rapid7
Vulnerabilities and Exploits
CVE-2026-33032: Nginx UI Missing MCP Authentication
Rapid7
Vulnerabilities and Exploits
CVE-2026-3055: Citrix NetScaler ADC and NetScaler Gateway Out-of-Bounds Read
Rapid7
Vulnerabilities and Exploits
Critical Cisco Catalyst Vulnerability Exploited in the wild (CVE-2026-20127)
Rapid7 Labs
Vulnerabilities and Exploits
CVE-2026-1731: Critical Unauthenticated Remote Code Execution in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
Rapid7
Vulnerabilities and Exploits
Critical Ivanti Endpoint Manager Mobile (EPMM) zero-day exploited in the wild (CVE-2026-1281 & CVE-2026-1340)
Rapid7
Vulnerabilities and Exploits
Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554
Rapid7
Vulnerabilities and Exploits
Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n
Rapid7