All Articles

Patch Tuesday - August 2026

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

Metasploit Pro 5.1 Released

The Metasploit Team

Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks

Rapid7 at Black Hat USA 2026: See preemptive security in action

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment

Metasploit Framework 6.5 Released

The Metasploit Team

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

How AI is Rewriting the Zero-Day Playbook for Preemptive Security

Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232)

The Next Evolution of MDR: Preemptive Defense and Agentic Investigation

Rapid7 Cyber GRC is now available: Turn security action into compliance proof

Michael Chroney

Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success

What Happened Between OpenAI and Hugging Face?

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild