Where
-Infinity
0

Rapid7 InsightVMRapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

Risk 69
Severity
7.8
First published (updated )

Rapid7 InsightConnect Markdown PluginServer-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin

Risk 23
Severity
4.8
EPSS
0.25%
First published (updated )

Rapid7 InsightConnect Tcpdump PluginOS Command Injection in Rapid7 InsightConnect Tcpdump Plugin

Risk 57
Severity
8.8
EPSS
0.83%
First published (updated )

Rapid7 InsightConnect Compression PluginPath Traversal in Rapid7 InsightConnect Compression Plugin

Risk 16
Severity
4.3
EPSS
0.22%
First published (updated )

Rapid7 InsightConnect Traceroute PluginOS Command Injection in Rapid7 InsightConnect Traceroute Plugin

Risk 61
Severity
9.8
EPSS
0.68%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Rapid7 InsightConnect AWK PluginOS Command Injection in Rapid7 InsightConnect AWK Plugin

Risk 61
Severity
9.8
EPSS
0.68%
First published (updated )

Rapid7 InsightConnect Finger PluginOS Command Injection in Rapid7 InsightConnect Finger Plugin

Risk 57
Severity
8.8
EPSS
0.83%
First published (updated )

Rapid7 InsightConnect Translate PluginOS Command Injection in Rapid7 InsightConnect Translate Plugin

Risk 61
Severity
9.8
EPSS
0.68%
First published (updated )

Rapid7 InsightConnect Ping PluginOS Command Injection in Rapid7 InsightConnect Ping Plugin

Risk 61
Severity
9.8
EPSS
0.68%
First published (updated )

Rapid7 InsightConnect Sed PluginArbitrary File Read in Rapid7 InsightConnect Sed Plugin

Risk 27
Severity
6.5
EPSS
0.31%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Rapid7 InsightConnect Sed PluginArbitrary File Write in Rapid7 InsightConnect Sed Plugin

Risk 35
Severity
7.1
EPSS
0.27%
First published (updated )

Rapid7 InsightConnect Sed PluginOS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

Risk 57
Severity
8.8
EPSS
0.92%
First published (updated )

Rapid7 InsightConnect SQLmap PluginOS Command Injection in Rapid7 InsightConnect SQLmap Plugin

Risk 57
Severity
8.8
EPSS
0.83%
First published (updated )

Rapid7 InsightConnect RPM PluginOS Command Injection in Rapid7 InsightConnect RPM Plugin

Risk 57
Severity
8.8
EPSS
0.83%
First published (updated )

Rapid7 Velociraptor Windows.Collectors.RemappingCode Injection

Risk 51
Severity
7.8
EPSS
0.15%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Rapid7 Metasploit Pro (Windows)Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading

Risk 55
Severity
8.5
EPSS
0.01%
First published (updated )

Velocidex VelociraptorVelociraptor EVTX Parser — Process Crash via Crafted .evtx File

Risk 23
Severity
5.5
EPSS
0.01%
First published (updated )

Velocidex VelociraptorGetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations

Risk 31
Severity
7.7
EPSS
0.01%
First published (updated )

Rapid7 Insight AgentLocal Privilege Escalation via OpenSSL configuration file in Insight Agent

Risk 49
Severity
8.5
EPSS
0.01%
First published (updated )

Velocidex VelociraptorVelociraptor Query() Plugin Misapplies Permissions To Orgs

Risk 54
Severity
9.1
EPSS
0.04%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Insight AgentInsight Agent Private Key Information Disclosure via Inherited File Permissions

Risk 27
Severity
6.8
EPSS
0.01%
First published (updated )

Rapid7 VelociraptorRapid7 Velociraptor Improper Input Validation in Client Message Handler

Risk 54
Severity
8.5
EPSS
0.22%
First published (updated )

Rapid7 Insight AgentEval Injection in Rapid7 Insight Agent

Risk 49
Severity
7.2
EPSS
0.30%
First published (updated )

Rapid7 InsightVMRapid7 InsightVM Signature Validation Vulnerability

Risk 68
Severity
9.6
First published (updated )

Rapid7 NexposeRapid7 Nexpose Insecure Java Keystore Password Generation

Risk 32
Severity
6.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Rapid7 VelociraptorRapid7 Velociraptor Directory Traversal Vulnerability

Risk 40
Severity
6.8
First published (updated )

BleepingComputerHackers now use Velociraptor DFIR tool in ransomware attacks

First published (updated )

Rapid7 AppSpider ProRapid7 AppSpider Project Name Validation Bypass

Risk 18
Severity
3.3
First published (updated )

Rapid7 AppSpider ProRapid7 Appspider Broken Access Control Vulnerability

Risk 18
Severity
3.3
First published (updated )

Rapid7 VelociraptorRapid7 Velociraptor Incorrect Default Permissions Vulnerability

Risk 65
Severity
5.5
EPSS
0.05%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203