Posts tagged Emergent Threat Response
Vulnerabilities and Exploits
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)
Jonah Burgess
Vulnerabilities and Exploits
KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails
Rapid7 Labs
Vulnerabilities and Exploits
Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)
Rapid7
Vulnerabilities and Exploits
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity
Rapid7
Vulnerabilities and Exploits
Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
Rapid7 Labs
Vulnerabilities and Exploits
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Rapid7
Vulnerabilities and Exploits
Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
Jonah Burgess
Vulnerabilities and Exploits
CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry
Rapid7
Vulnerabilities and Exploits
Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)
Rapid7
Vulnerabilities and Exploits
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
Rapid7
Vulnerabilities and Exploits
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
Rapid7
Vulnerabilities and Exploits
Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)
Jonah Burgess
Vulnerabilities and Exploits
CVE-2026-41940: cPanel & WHM Authentication Bypass
Rapid7
Vulnerabilities and Exploits
CVE-2026-33032: Nginx UI Missing MCP Authentication
Rapid7