LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Rapid7

4 CVEs published in the last four months and 5 stories. Exploited flaws first.

Critical0
High4
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-85927.7highinsightconnect awkOS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows111d ago
CVE-2026-86607.7highinsightconnect pingOS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote a111d ago
CVE-2026-86657.7highinsightconnect translateOS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remot111d ago
CVE-2026-86667.7highinsightconnect tracerouteOS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux all111d ago

Filter the full tracker by Rapid7 →

Our coverage of Rapid7

CVE-2026-63520critical

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

A remote code execution (RCE) vulnerability, identified as CVE-2026-63520, has been disclosed in Microsoft SharePoint, allowing an authenticated attacker to execute arbitrary code on a vulnerable server. When chained with an authentication bypass vulnerability, CVE-2026-55040, the exploit becomes unauthenticated.

cybersecurity

Rapid7 and Licencias OnLine Partner for Latin American Cybersecurity

Rapid7, a cybersecurity solutions provider, has announced a new strategic distribution partnership with Licencias OnLine (LOL) to expand its reach across Latin America. The collaboration aims to provide organizations in the region with enhanced cybersecurity operations platforms and support as they navigate increasing digital transformation, cloud adoption, and the integration of artificial…

breach

In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

Recent reports have highlighted a series of cybersecurity incidents and industry developments, including a reported method for hacking a Boeing 737, vulnerabilities identified in refrigeration systems, and a data breach at a federal agency attributed to a North Korean IT worker. These stories, alongside news of layoffs at Rapid7 and a DEF CON attendee being linked to a Delta flight disruption,…

CVE-2026-63077critical

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

On July 27, 2026, JetBrains issued a security advisory for CVE-2026-63077, a critical unsafe deserialization vulnerability affecting its TeamCity product. This flaw allows an unauthenticated attacker to achieve remote code execution by exploiting the agent polling protocol. An attacker capable of reaching a TeamCity server via HTTP or HTTPS can execute operating system commands with the…

cybersecurity

Rapid7 at Black Hat USA 2026: See preemptive security in action

Rapid7 is set to showcase its "preemptive security" approach at Black Hat USA 2026, which will be held at the Mandalay Bay in Las Vegas this August. The company's presence will include a booth in the Business Hall, dedicated demonstrations, expert-led sessions, and a two-day event at the Border Grill.