Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)Blog ↗CVE details

CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)

CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the Wild

CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)Blog ↗CVE details

CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)Blog ↗CVE details

CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Blog ↗CVE details

CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on RailsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-6690: Improper Neutralization of Input During Web Page Generation	7.2 High	N/A	0%	May 12, 2026
CVE-2026-66909: Deserialization of Untrusted Data	9.8 Critical	N/A	1%	Aug 6, 2026
CVE-2026-66902: Improper Neutralization of Special Elements used in an OS Command	9.8 Critical	N/A	0%	Aug 4, 2026
CVE-2026-66901: Server-Side Request Forgery (SSRF)	7.5 High	N/A	0%	Aug 4, 2026