velocidex
Security Risk Profile
31
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 16, 2024 to present
7
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
31/100
low
Severity Distribution
Critical
1High
3Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
Input Validation
1
Most Affected Products
1. Velocidex Velociraptor5
2. Rapid7 Velociraptor3
3. Velocidex WinPmem2
4. go/www.velocidex.com/golang/velociraptor1
Recent Vulnerabilities
See more →CVE-2026-6863
CVSS 6.8EPSS 0%medium
HTTP Filestore Endpoints Misapply Permissions Across Organizations
5/6/2026🔧 No Patch
CVE-2026-7572
CVSS 5.5EPSS 0%medium
Velociraptor EVTX Parser — Process Crash via Crafted .evtx File
5/6/2026🔧 No Patch
CVE-2026-7573
CVSS 7.7EPSS 0%high
GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations
5/6/2026🔧 No Patch
CVE-2026-6948
CVSS 4.9EPSS 0%medium
Unbounded Memory Allocation in VQLResponse Result-Set Writer
5/3/2026🔧 No Patch
CVE-2026-6290
CVSS 9.1EPSS 0%critical
Velociraptor Query() Plugin Misapplies Permissions To Orgs
4/15/2026🔧 No Patch
CVE-2024-12668
CVSS 8.2high
Velocidex WinPmem Out of Bounds Write Vulnerability
12/16/2024🔧 No Patch
CVE-2024-10972
CVSS 7.3high
WinPmem Improper Input Validation vulnerability
12/16/2024🔧 No Patch
Monitor velocidex in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.