Vulnerabilities in Rapid7
135 resultsCVE-2026-18635HIGHVelociraptor query plugin allows impersonation in other orgsEPSS 0.5%CVE-2026-9153MEDIUMArbitrary File Read in Rapid7 InsightConnect Sed PluginEPSS 0.5%CVE-2023-1699MEDIUMRapid7 Nexpose Forced BrowsingEPSS 0.4%CVE-2026-18860HIGHVelociraptor incorrect Org deletion permissions checkEPSS 0.4%CVE-2026-18640HIGHVelociraptor directory traversal via the NewNotebook APIEPSS 0.4%CVE-2022-0758LOWRapid7 Nexpose Reflected XSSEPSS 0.4%CVE-2026-4837MEDIUMEval Injection in Rapid7 Insight AgentEPSS 0.4%CVE-2026-87690HIGHMetasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code ExecutionEPSS 0.4%CVE-2026-18638MEDIUMVelociraptor server crash via the SetPassword APIEPSS 0.4%CVE-2026-9154HIGHArbitrary File Write in Rapid7 InsightConnect Sed PluginEPSS 0.4%CVE-2026-18636MEDIUMVelociraptor VFSGetBuffer API path deny list bypassEPSS 0.4%CVE-2026-19072CRITICALVelociraptor Investigator reaches SuperUser via hunt EffectivePrincipalEPSS 0.4%CVE-2026-18639HIGHVelociraptor OIDC Authenticator susceptible to email spoofingEPSS 0.4%CVE-2017-5242HIGHRapid7 Nexpose Virtual Appliance Duplicate SSH Host KeyEPSS 0.4%CVE-2019-5641LOWRapid7 InsightVM Information Disclosure after LogoutEPSS 0.4%CVE-2023-2226LOWVelociraptor crashes while parsing some malformed PE or OLE files.EPSS 0.4%CVE-2026-8661MEDIUMServer-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF PluginEPSS 0.4%CVE-2023-0599MEDIUMRapid7 Metasploit Pro Stored XSSEPSS 0.4%CVE-2026-15371HIGHVelociraptor Stored XSS in URL column typesEPSS 0.4%CVE-2026-87689CRITICALMetasploit Framework Web Service REST API Missing Authentication on Credential EndpointsEPSS 0.4%