rapid7

Patch Management: What It Is & Best Practices

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Patch management is the process of distributing and applying updates to software. These patches are often ...
rapid7

CVE-2026-19445: Use After Free

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a ...
rapid7

CVE-2026-95386: Loop with Unreachable Exit Condition

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
rapid7

CVE-2026-97281: Missing Authorization

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions. CVSS 3.1 Base Score: 6.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L ...
rapid7

How AI Is Changing the Roles Required in the Security Operations Center

How will AI change the role of SOC analysts? Where does human judgment remain essential? Why are SOC engineering roles expected to expand? Why should Exposure Management be a continuous SOC function?
rapid7

Rapid7 Acquires Kenzo Security to Accelerate Preemptive, AI-Powered Security Operations

BOSTON — March 26, 2026 — Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced it has acquired Kenzo Security, an agentic AI security platform built to ...
rapid7

Higher education is under siege, and fragmented security is making it harder to respond

Why is higher education so difficult to secure? Why multi-campus fragmentation increases cyber risk What should university systems change? Higher education faces a difficult security equation.
rapid7

CVE-2026-102261: Authorization Bypass Through User-Controlled Key

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of the ...
rapid7

CVE-2026-35273: Missing Authentication for Critical Function

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily ...
rapid7

CVE-2026-92767: zayedbaloch Twenty20 Image Before-After: The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset'…

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input ...
rapid7

CVE-2026-86950: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously ...
rapid7

CVE-2026-97267: miniOrange Prevent files / folders access: Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.

CVSS 3.1 Base Score: 4.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) With curated Threat Intelligence, you can see which vulnerabilities truly put ...