Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554

Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n

MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data

CVE-2025-37164: Critical unauthenticated RCE affecting Hewlett Packard Enterprise OneView

Critical vulnerabilities in Fortinet CVE-2025-59718, CVE-2025-59719, CVE-2026-24858 exploited in the wild

Test for React2Shell with Application Security using New Functionality

New Research: Multifunction Printer (MFP) Security Concerns within the Enterprise Business Environment

Deral Heiland, Sam Moses

CVE-2025-10573: Ivanti EPM Unauthenticated Stored Cross-Site Scripting (Fixed)

React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components

CVE-2025-13315, CVE-2025-13316: Critical Twonky Server Authentication Bypass (NOT FIXED)

CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild

When Your Calendar Becomes the Compromise

Rapid7 Intelligence

Defend Smarter, Not Harder: The Power of Curated Vulnerability Intelligence

Rapid7 at Pwn2Own: Raising the Bar in Vuln Intel

Inside the F5 Breach: What We Know and Recommended Actions

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Stephen Fewer, Christiaan Beek

CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products

CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025)

CVE-2025-10035 - Critical unauthenticated RCE in GoAnywhere MFT

Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise

CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild