Vulnerabilities in Rapid7
135 resultsCVE-2026-7373HIGHMetasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File LoadingEPSS 0.2%CVE-2026-115805HIGHRapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration PathEPSS 0.2%CVE-2026-109682MEDIUMMetasploit Framework HTTP Redirect Server-Side Request ForgeryEPSS 0.2%CVE-2026-1568CRITICALRapid7 InsightVM Signature Validation VulnerabilityEPSS 0.2%CVE-2026-1814MEDIUMRapid7 Nexpose Insecure Java Keystore Password GenerationEPSS 0.2%CVE-2026-14172HIGHRapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable InvocationEPSS 0.2%CVE-2026-78413MEDIUMVelociraptor privilege escalation via SysmonLogForward client monitoring artifactEPSS 0.2%CVE-2026-17535MEDIUMVelociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS VolumesEPSS 0.2%CVE-2026-121139HIGHRapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authenticationEPSS 0.2%CVE-2026-8795HIGHA YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostnamEPSS 0.1%CVE-2026-89325HIGHRapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalationEPSS 0.1%CVE-2025-36857LOWRapid7 Appspider Broken Access Control VulnerabilityEPSS 0.1%CVE-2026-77797LOWVelociraptor Prefetch parser out of boundsEPSS 0.1%CVE-2025-11195LOWRapid7 AppSpider Project Name Validation BypassEPSS 0.1%CVE-2026-4482MEDIUMInsight Agent Private Key Information Disclosure via Inherited File PermissionsEPSS 0.1%