Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)Blog ↗CVE details

CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)

CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the Wild

CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)Blog ↗CVE details

CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)Blog ↗CVE details

CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Blog ↗CVE details

CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on RailsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-5028: Improper Neutralization of Special Elements used in an SQL Command	6.5 Medium	N/A	0%	May 12, 2026
CVE-2026-50289: Improper Neutralization of Special Elements used in an OS Command	8.8 High	8.7 High	2%	Jul 17, 2026
CVE-2026-50282: Missing Authorization	N/A	4.9 Medium	0%	Jul 2, 2026
CVE-2026-50281: Improperly Controlled Modification of Dynamically-Determined Object Attributes	N/A	7.1 High	0%	Jul 2, 2026
CVE-2026-50280: Improper Access Control	N/A	6.0 Medium	0%	Jul 2, 2026
CVE-2026-50284: Missing Authorization	N/A	7.1 High	0%	Jul 1, 2026
CVE-2026-50283: Missing Authorization	N/A	5.3 Medium	0%	Jul 1, 2026
CVE-2026-50287: Missing Authentication for Critical Function	N/A	8.7 High	0%	Jun 12, 2026