Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)Blog ↗CVE details

CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)

CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the Wild

CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)Blog ↗CVE details

CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)Blog ↗CVE details

CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Blog ↗CVE details

CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on RailsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-4301: Missing Authorization	4.3 Medium	N/A	0%	May 12, 2026
CVE-2026-43017: Undefined Security Weakness	5.5 Medium	N/A	0%	May 1, 2026
CVE-2026-43015: Use After Free	7.8 High	N/A	0%	May 1, 2026
CVE-2026-43014: Undefined Security Weakness	5.5 Medium	N/A	0%	May 1, 2026
CVE-2026-43013: NULL Pointer Dereference	5.5 Medium	N/A	0%	May 1, 2026
CVE-2026-43012: Undefined Security Weakness	5.5 Medium	N/A	0%	May 1, 2026
CVE-2026-43010: Undefined Security Weakness	5.5 Medium	N/A	0%	May 1, 2026
CVE-2026-43019: Use After Free	7.8 High	N/A	0%	May 1, 2026
CVE-2026-43018: Use After Free	8.8 High	N/A	0%	May 1, 2026
CVE-2026-43016: Use After Free	7.8 High	N/A	0%	May 1, 2026
CVE-2026-43011: Double Free	9.8 Critical	N/A	1%	May 1, 2026