Vulnerabilities in Rapid7
135 resultsCVE-2026-64955MEDIUMVelociraptor CSV Formula Injection in Export PipelineEPSS 0.4%CVE-2021-3844MEDIUMRapid7 InsightVM Insufficient Session ExpirationEPSS 0.4%CVE-2026-18972CRITICALVelociraptor authenticated identity-spoofing vulnerabilityEPSS 0.4%CVE-2026-6948MEDIUMUnbounded Memory Allocation in VQLResponse Result-Set WriterEPSS 0.3%CVE-2026-18652MEDIUMVelociraptor STACK Type Download Path Bypasses Denied Prefix CheckEPSS 0.3%CVE-2026-18348MEDIUMVelociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL pluginsEPSS 0.3%CVE-2024-11401MEDIUMRapid7 Insight Platform Privilege Escalation VulnerabilityEPSS 0.3%CVE-2019-5647MEDIUMRapid7 AppSpider Chrome Plugin Insufficient Session ExpirationEPSS 0.3%CVE-2021-4007HIGHRapid7 Insight Agent Privilege EscalationEPSS 0.3%CVE-2023-0681MEDIUMRapid7 Nexpose Uncontrolled URL RedirectEPSS 0.3%CVE-2026-19200HIGHVelociraptor Analyst overwrites live built-in artifacts through verify()EPSS 0.3%CVE-2022-4261MEDIUMRapid7 Nexpose Update Validation IssueEPSS 0.3%CVE-2024-6504MEDIUMRapid7 InsightVM Protection Mechanism FailureEPSS 0.3%CVE-2026-19584HIGHVelociraptor VQL injection during notebook restore from backupEPSS 0.3%CVE-2019-5642LOWMAGICKEPSS 0.3%CVE-2026-64954HIGHVelociraptor collect_client() Permissions BypassEPSS 0.3%CVE-2026-64952MEDIUMVelociraptor Hunt Deletion With Insufficient Permission CheckEPSS 0.3%CVE-2026-8662LOWPath Traversal in Rapid7 InsightConnect Compression PluginEPSS 0.3%CVE-2022-3913MEDIUMRapid7 Nexpose Certificate Validation IssueEPSS 0.3%CVE-2020-7382MEDIUMUnquoted Path in Rapid7 Nexpose InstallerEPSS 0.3%