Skip to content
OpenAdvisories

Vendor

Rapid7

135 known vulnerabilities.

Products

Velociraptor 42 Nexpose 17 Insight Agent 12 Metasploit Framework 12 InsightVM 8 Appspider Pro 6 Metasploit Pro 6 Metasploit 4 InsightCloudSec 3 InsightConnect Sed Plugin 3 AppSpider 2 Insight Platform 2 Rapid7 Nexpose 1 Platform 1 InsightAppSec 1 InsightConnect Ping Plugin 1 Vulnerability Management 1 InsightConnect Finger Plugin 1 InsightConnect Markdown Plugin 1 InsightConnect Traceroute Plugin 1 Minerva 1 InsightConnect AWK Plugin 1 Insight Collector 1 Nexpose hardware appliance 1 Nexpose/InsightVM Security Console 1 Nexpose Virtual Appliance 1 InsightVM Virtual Appliance 1 Metasploit (Pro, Express, and Community editions) 1 InsightConnect SQLmap Plugin 1 Komand 1 InsightConnect RPM Plugin 1 InsightConnect Compression Plugin 1 InsightConnect Tcpdump Plugin 1 InsightConnect TR Plugin 1 InsightVM/Nexpose 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-87689

    Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints

    The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential…

    Rapid7 Metasploit Framework
  • Critical 9.9
    CVE-2026-19072

    Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal

    Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_args" is an internal field, Velociraptor allowed the field to be set from a use…

    Rapid7 Velociraptor
  • Critical 9.9
    CVE-2026-19583

    Velociraptor Required Permissions bypass by using client monitoring queries

    Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was…

    Rapid7 Velociraptor
  • Critical 9.6
    CVE-2026-18972

    Velociraptor authenticated identity-spoofing vulnerability

    An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.

    Rapid7 Velociraptor
  • Critical 9.6
    CVE-2026-1568

    Rapid7 InsightVM Signature Validation Vulnerability

    Rapid7 InsightVM versions before 8.34.0 contain a signature verification issue on the Assertion Consumer Service (ACS) cloud endpoint that could allow an attacker to gain unauthorized access to InsightVM accounts setup via "Security Console" installations, re…

    Rapid7 Vulnerability Management