Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress CoreBlog ↗CVE details

CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

CVE-2026-50751:Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the WildBlog ↗CVE details

CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)Blog ↗CVE details

CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)Blog ↗CVE details

CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti SentryBlog ↗CVE details

CVE-2026-50751:Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)Blog ↗CVE details

Title			EitW	Modules

Title			EitW	Modules
CVE-2026-63766: RVC-Boss GPT-SoVITS: GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise,…	9.8 Critical	9.3 Critical			1%	Jul 20, 2026