AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Rapid7 security advisories

27 advisories across Rapid7

Company profile
Medium 4.7Oct 21Rapid7 Metasploit Framework: server-side request forgeryCVE-2026-109682fixed in 6.5.7Medium 4.7Oct 21Rapid7 Metasploit Framework: server-side request forgeryCVE-2026-109681fixed in 6.5.7Low 2.7Sep 25Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query...CVE-2026-97228fixed in 0.6.2High 7.8Sep 24Rapid7 Insight Agent: code executionCVE-2026-89325no fix yetLow 3.6Sep 24Rapid7 Velociraptor: improper input validationCVE-2026-77797fixed in 0.77.3Medium 6.5Sep 24Velociraptor contains a deadlock conditionCVE-2026-77798fixed in 0.77.2Critical 9.9Sep 24Velociraptor stores the compiled VQL in the hunt object internally to avoid...CVE-2026-19072fixed in 0.77.2High 7.7Sep 10Rapid7 Velociraptor: code injectionCVE-2026-19584fixed in 0.77.2Critical 9.9Sep 10Rapid7 Velociraptor: insecure permissionsCVE-2026-19583fixed in 0.77.2Medium 5.1Aug 27A logic vulnerabilityCVE-2026-16895fixed in 6.5.2High 8.9Aug 24Rapid7 Velociraptor: code injectionCVE-2026-19200fixed in 0.77.2High 8.1Aug 18Rapid7 Velociraptor: cross-site scriptingCVE-2026-15371fixed in 0.77.2Low 3.5Aug 12A rogue Velociraptor client can upload a malformed sparse file suchCVE-2026-64951fixed in 0.77.2Medium 6.5Aug 12Rapid7 Velociraptor: improper authorizationCVE-2026-64952fixed in 0.77.2Medium 6.1Aug 12Rapid7 Velociraptor: CSV injectionCVE-2026-64955fixed in 0.77.2Medium 6.5Aug 12Rapid7 Velociraptor: missing authorizationCVE-2026-18652fixed in 0.77.2High 8.2Aug 12Rapid7 Velociraptor: missing authorizationCVE-2026-64954fixed in 0.77.2Medium 6.5Aug 11Rapid7 Velociraptor: null pointer dereferenceCVE-2026-18638fixed in 0.77.2High 7.3Aug 11Rapid7 Velociraptor: authentication bypass by spoofingCVE-2026-18639fixed in 0.77.2High 7.1Aug 11Rapid7 Velociraptor: path traversalCVE-2026-18640fixed in 0.77.2High 7.2Aug 11Rapid7 Velociraptor: improper authorizationCVE-2026-18635fixed in 0.77.2Medium 6.8Aug 11Rapid7 Velociraptor: authentication bypassCVE-2026-18636fixed in 0.77.2High 8.7Aug 11Rapid7 Velociraptor: improper permission handlingCVE-2026-18860fixed in 0.77.2Medium 6.2Aug 11Rapid7 Velociraptor: denial of serviceCVE-2026-17535fixed in 0.77.2Critical 9.6Aug 11Rapid7 Velociraptor: authentication bypass by spoofingCVE-2026-18972fixed in 0.77.2Medium 4.1Aug 11Rapid7 Velociraptor: missing authorizationCVE-2026-18348fixed in 0.77.2High 7.8Jul 24Rapid7 Insight Agent: excessive privilegesCVE-2026-14172fixed in InsightVM 1.1.3935 +2
About Rapid7

Elsewhere on Ibis: Quarterly · Paydays