Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Latest articles about Vulnerabilities and Exploits

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232)

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

Sunsetting the Public AttackerKB Platform

Douglas McKee, Director, Vulnerability Intelligence

Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)