Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress CoreBlog ↗CVE details

CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

Blog ↗CVE details

CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

Blog ↗CVE details

CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Blog ↗CVE details

CVE-2026-50751:Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

Blog ↗CVE details

CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)Blog ↗CVE details

CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)Blog ↗CVE details

CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti SentryBlog ↗CVE details

CVE-2026-50751:Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-59776: Missing Cryptographic Step	6.8 Medium	7.0 High	N/A	Jul 21, 2026
CVE-2026-16336: A vulnerability was found in trinodb trino 481	4.3 Medium	5.3 Medium	N/A	Jul 21, 2026
CVE-2026-6952: OS Command Injection	7.2 High	N/A	N/A	Jul 21, 2026
CVE-2026-63729: Use After Free	6.6 Medium	6.8 Medium	N/A	Jul 21, 2026
CVE-2026-16334: A vulnerability was identified in itsourcecode Hospital Management System 1.0	6.3 Medium	2.1 Low	N/A	Jul 21, 2026
CVE-2026-16332: A vulnerability was detected in D-Link DNS-320 1.0.2	7.3 High	5.5 Medium	N/A	Jul 21, 2026
CVE-2026-16331: A security vulnerability has been detected in D-Link DNS-320 1.0.2	7.3 High	5.5 Medium	N/A	Jul 21, 2026
CVE-2026-16330: A weakness has been identified in D-Link DNS-320 1.0.2	7.3 High	5.5 Medium	N/A	Jul 21, 2026
CVE-2026-16329: A vulnerability was identified in D-Link DNS-320 1.0.2	7.3 High	5.5 Medium	N/A	Jul 21, 2026
CVE-2026-63728: Improper Neutralization of Special Elements Used in a Template Engine	6.3 Medium	8.1 High	N/A	Jul 21, 2026
CVE-2026-55833: Uncontrolled Resource Consumption	7.5 High	N/A	N/A	Jul 21, 2026
CVE-2026-55831: Uncontrolled Resource Consumption	7.5 High	N/A	N/A	Jul 21, 2026
CVE-2026-16327: A vulnerability was determined in D-Link DNS-320 1.0.2	7.3 High	5.5 Medium	N/A	Jul 21, 2026
CVE-2026-15905: Use After Free	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-15904: Use After Free	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-15903: Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute…	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-15902: Use After Free	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-15901: Use After Free	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-15900: Use After Free	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-15899: Use After Free	N/A	N/A	N/A	Jul 20, 2026
CVE-2026-64626: Server-Side Request Forgery (SSRF)	6.4 Medium	5.3 Medium	N/A	Jul 20, 2026
CVE-2026-64625: OS Command Injection	9.8 Critical	9.3 Critical	N/A	Jul 20, 2026
CVE-2026-64624: Argument Injection	7.8 High	8.5 High	N/A	Jul 20, 2026
CVE-2026-57852: Incorrect Implementation of Authentication Algorithm	5.6 Medium	6.3 Medium	N/A	Jul 20, 2026
CVE-2026-57495: AgenticMail gives AI agents real email addresses and phone numbers	N/A	8.2 High	N/A	Jul 20, 2026

Rows per page

1-25 of 367895