Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Rapid7 Intelligence

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232)

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

Rapid7 Intelligence

CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

Sunsetting the Public AttackerKB Platform

Douglas McKee, Director, Vulnerability Intelligence

Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation

Douglas McKee, Director, Vulnerability Intelligence