Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-16232:Critical Check Point SmartConsole Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-16232:Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress CoreBlog ↗CVE details

CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)Blog ↗CVE details

CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)Blog ↗CVE details

CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti SentryBlog ↗CVE details

Title			EitW	Modules

Title			EitW	Modules
CVE-2026-13009: wupsales AI Copilot – Content Generator: The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]'…	6.5 Medium	N/A			N/A	Jul 23, 2026