Rapid7 vulnerabilities
135 CVEs and advisories name Rapid7 as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121139Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication
- CVE-2026-115805Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path
- CVE-2026-109682Metasploit Framework HTTP Redirect Server-Side Request Forgery
- CVE-2026-109681Metasploit Framework FTP PASV Response SSRF
- CVE-2026-87689Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints
- CVE-2026-87690Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
- CVE-2026-78413Velociraptor privilege escalation via SysmonLogForward client monitoring artifact
- CVE-2026-78411Velociraptor Server Metadata update with Insufficient Permission Check
- CVE-2026-78412WatchEvent API streams another organization's live events
- CVE-2026-97228Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup
- CVE-2026-89325Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation
- CVE-2026-77798Velociraptor Authenticated Denial of Service
- CVE-2026-77797Velociraptor Prefetch parser out of bounds
- CVE-2026-19072Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
- CVE-2026-19584Velociraptor VQL injection during notebook restore from backup
- CVE-2026-19583Velociraptor Required Permissions bypass by using client monitoring queries
- CVE-2026-16895Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails
- CVE-2026-19200Velociraptor Analyst overwrites live built-in artifacts through verify()
- CVE-2026-15371Velociraptor Stored XSS in URL column types
- CVE-2026-18652Velociraptor STACK Type Download Path Bypasses Denied Prefix Check
- CVE-2026-64951Velociraptor DoS triggered by Divide by Zero panic
- CVE-2026-64952Velociraptor Hunt Deletion With Insufficient Permission Check
- CVE-2026-64955Velociraptor CSV Formula Injection in Export Pipeline
- CVE-2026-64954Velociraptor collect_client() Permissions Bypass
- CVE-2026-18639Velociraptor OIDC Authenticator susceptible to email spoofing
- CVE-2026-18638Velociraptor server crash via the SetPassword API
- CVE-2026-18640Velociraptor directory traversal via the NewNotebook API
- CVE-2026-18860Velociraptor incorrect Org deletion permissions check
- CVE-2026-17535Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes
- CVE-2026-18636Velociraptor VFSGetBuffer API path deny list bypass