Rapid7 vulnerabilities

Products

• Velociraptor 45
• Nexpose 22
• Metasploit 17
• Insight Agent 12
• Insightvm 11
• Metasploit Framework 11
• Insight Agent 8
• Appspider Pro 6
• Appspider Pro 6
• Metasploit Pro 6
• Insightappsec 4
• Insightcloudsec 3
• Insightconnect Sed Plugin 3
• Appspider 2
• Insight Platform 2

Newest

• rapid7 velociraptor Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin CVE-2026-85737 6.5 MediumNovember 6, 2026
• rapid7 metasploit framework Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication CVE-2026-121139 7.3 HighNovember 5, 2026
• rapid7 insight agent Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path CVE-2026-115805 7.8 HighOctober 29, 2026
• rapid7 metasploit framework Metasploit Framework HTTP Redirect Server-Side Request Forgery CVE-2026-109682 4.7 MediumOctober 20, 2026
• rapid7 metasploit framework Metasploit Framework FTP PASV Response SSRF CVE-2026-109681 4.7 MediumOctober 20, 2026
• rapid7 metasploit framework Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints CVE-2026-87689 9.8 CriticalOctober 13, 2026
• rapid7 metasploit framework Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution CVE-2026-87690 Public exploit 8.8 HighOctober 12, 2026
• rapid7 velociraptor Velociraptor privilege escalation via SysmonLogForward client monitoring artifact CVE-2026-78413 5.5 MediumOctober 5, 2026
• rapid7 velociraptor Velociraptor Server Metadata update with Insufficient Permission Check CVE-2026-78411 6.5 MediumOctober 5, 2026
• rapid7 velociraptor WatchEvent API streams another organization's live events CVE-2026-78412 4.9 MediumOctober 5, 2026
• rapid7 platform Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup CVE-2026-97228 2.7 LowSeptember 25, 2026
• rapid7 insight agent Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation CVE-2026-89325 7.8 HighSeptember 24, 2026
• rapid7 velociraptor Velociraptor Authenticated Denial of Service CVE-2026-77798 6.5 MediumSeptember 24, 2026
• rapid7 velociraptor Velociraptor Prefetch parser out of bounds CVE-2026-77797 3.6 LowSeptember 24, 2026
• rapid7 velociraptor Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal CVE-2026-19072 9.9 CriticalSeptember 24, 2026
• rapid7 velociraptor Velociraptor VQL injection during notebook restore from backup CVE-2026-19584 7.7 HighSeptember 10, 2026
• rapid7 velociraptor Velociraptor Required Permissions bypass by using client monitoring queries CVE-2026-19583 9.9 CriticalSeptember 10, 2026
• rapid7 metasploit-framework Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails CVE-2026-16895 5.1 MediumAugust 27, 2026
• rapid7 velociraptor Velociraptor Analyst overwrites live built-in artifacts through verify() CVE-2026-19200 8.9 HighAugust 24, 2026
• rapid7 velociraptor Velociraptor Stored XSS in URL column types CVE-2026-15371 8.1 HighAugust 18, 2026
• rapid7 velociraptor Velociraptor STACK Type Download Path Bypasses Denied Prefix Check CVE-2026-18652 6.5 MediumAugust 12, 2026
• rapid7 velociraptor Velociraptor DoS triggered by Divide by Zero panic CVE-2026-64951 3.5 LowAugust 12, 2026
• rapid7 velociraptor Velociraptor Hunt Deletion With Insufficient Permission Check CVE-2026-64952 6.5 MediumAugust 12, 2026
• rapid7 velociraptor Velociraptor CSV Formula Injection in Export Pipeline CVE-2026-64955 6.1 MediumAugust 12, 2026
• rapid7 velociraptor Velociraptor collect_client() Permissions Bypass CVE-2026-64954 8.2 HighAugust 12, 2026
• rapid7 velociraptor Velociraptor OIDC Authenticator susceptible to email spoofing CVE-2026-18639 7.3 HighAugust 11, 2026
• rapid7 velociraptor Velociraptor server crash via the SetPassword API CVE-2026-18638 6.5 MediumAugust 11, 2026
• rapid7 velociraptor Velociraptor directory traversal via the NewNotebook API CVE-2026-18640 7.1 HighAugust 11, 2026
• rapid7 velociraptor Velociraptor incorrect Org deletion permissions check CVE-2026-18860 8.7 HighAugust 11, 2026
• rapid7 velociraptor Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes CVE-2026-17535 6.2 MediumAugust 11, 2026
• rapid7 velociraptor Velociraptor VFSGetBuffer API path deny list bypass CVE-2026-18636 6.8 MediumAugust 11, 2026
• rapid7 velociraptor Velociraptor query plugin allows impersonation in other orgs CVE-2026-18635 7.2 HighAugust 11, 2026
• rapid7 velociraptor Velociraptor authenticated identity-spoofing vulnerability CVE-2026-18972 9.6 CriticalAugust 11, 2026
• rapid7 velociraptor Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins CVE-2026-18348 4.1 MediumAugust 11, 2026
• rapid7 insight agent, insightvm, nexpose +2 more Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation CVE-2026-14172 7.8 HighJuly 24, 2026
• rapid7 insightconnect markdown plugin Server-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin CVE-2026-8661 4.8 MediumJune 26, 2026
• rapid7 insightconnect tcpdump plugin, insightconnect tcpdump +1 more OS Command Injection in Rapid7 InsightConnect Tcpdump Plugin CVE-2026-8658 6.0 MediumJune 25, 2026
• rapid7 insightconnect compression plugin, insightconnect compression +1 more Path Traversal in Rapid7 InsightConnect Compression Plugin CVE-2026-8662 3.3 LowJune 25, 2026
• rapid7 insightconnect traceroute plugin, insightconnect traceroute +1 more OS Command Injection in Rapid7 InsightConnect Traceroute Plugin CVE-2026-8666 7.7 HighJune 25, 2026
• rapid7 insightconnect awk plugin, insightconnect awk +1 more OS Command Injection in Rapid7 InsightConnect AWK Plugin CVE-2026-8592 7.7 HighJune 25, 2026
• rapid7 insightconnect finger plugin, insightconnect finger +1 more OS Command Injection in Rapid7 InsightConnect Finger Plugin CVE-2026-8664 6.0 MediumJune 25, 2026
• rapid7 insightconnect translate, insightconnect tr plugin +1 more OS Command Injection in Rapid7 InsightConnect Translate Plugin CVE-2026-8665 7.7 HighJune 25, 2026
• rapid7 insightconnect ping plugin, insightconnect ping +1 more OS Command Injection in Rapid7 InsightConnect Ping Plugin CVE-2026-8660 7.7 HighJune 25, 2026
• gnu sed, rapid7 insightconnect sed plugin +1 more Arbitrary File Read in Rapid7 InsightConnect Sed Plugin CVE-2026-9153 6.5 MediumJune 25, 2026
• gnu sed, rapid7 insightconnect sed plugin +1 more Arbitrary File Write in Rapid7 InsightConnect Sed Plugin CVE-2026-9154 7.1 HighJune 25, 2026
• gnu sed, rapid7 insightconnect sed plugin +1 more OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter. CVE-2026-9155 8.8 HighJune 25, 2026
• rapid7 insightconnect sqlmap plugin, insightconnect sqlmap +1 more OS Command Injection in Rapid7 InsightConnect SQLmap Plugin CVE-2026-8659 6.0 MediumJune 25, 2026
• rapid7 insightconnect rpm plugin, insightconnect rpm +1 more OS Command Injection in Rapid7 InsightConnect RPM Plugin CVE-2026-8663 6.0 MediumJune 24, 2026
• rapid7 velociraptor A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7... CVE-2026-8795 7.8 HighJune 9, 2026
• rapid7 metasploit pro Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading CVE-2026-7373 8.5 HighMay 15, 2026
• Show olderLoading…