Rapid7
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Velociraptor | 42 | – | Oct 5, 2026 |
| Nexpose | 11 | – | Jul 24, 2026 |
| Insight Agent | 11 | – | Oct 29, 2026 |
| Metasploit Framework | 10 | – | Nov 5, 2026 |
| InsightVM | 6 | – | Jul 24, 2026 |
| Metasploit Pro | 4 | – | May 15, 2026 |
| InsightCloudSec | 3 | – | Mar 21, 2023 |
| AppSpider Pro | 3 | – | Sep 30, 2025 |
| InsightConnect Sed Plugin | 3 | – | Jun 25, 2026 |
| Insight Platform | 2 | – | Dec 11, 2024 |
| InsightConnect Traceroute Plugin | 1 | – | Jun 25, 2026 |
| InsightVM/Nexpose | 1 | – | Feb 3, 2026 |
| Metasploit | 1 | – | Oct 29, 2020 |
| Minerva | 1 | – | Apr 3, 2024 |
| Platform | 1 | – | Sep 25, 2026 |
| Rapid7 Nexpose | 1 | – | Jun 16, 2021 |
| AppSpider | 1 | – | Sep 18, 2020 |
| Vulnerability Management | 1 | – | Feb 3, 2026 |
| InsightConnect AWK Plugin | 1 | – | Jun 25, 2026 |
| InsightConnect Compression Plugin | 1 | – | Jun 25, 2026 |
| InsightConnect Finger Plugin | 1 | – | Jun 25, 2026 |
| InsightConnect Markdown Plugin | 1 | – | Jun 26, 2026 |
| InsightConnect Ping Plugin | 1 | – | Jun 25, 2026 |
| InsightConnect RPM Plugin | 1 | – | Jun 24, 2026 |
| InsightConnect SQLmap Plugin | 1 | – | Jun 25, 2026 |
| InsightConnect Tcpdump Plugin | 1 | – | Jun 25, 2026 |
| InsightConnect TR Plugin | 1 | – | Jun 25, 2026 |
Exploited and recent CVEs
- CVE-2026-121139 Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication 0.2%
- CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path 0.2%
- CVE-2026-109682 Metasploit Framework HTTP Redirect Server-Side Request Forgery 0.2%
- CVE-2026-109681 Metasploit Framework FTP PASV Response SSRF 0.2%
- CVE-2026-87689 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints 0.4%
- CVE-2026-87690 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution 0.4%
- CVE-2026-78413 Velociraptor privilege escalation via SysmonLogForward client monitoring artifact 0.2%
- CVE-2026-78411 Velociraptor Server Metadata update with Insufficient Permission Check 0.2%
- CVE-2026-78412 WatchEvent API streams another organization's live events 0.2%
- CVE-2026-97228 Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup 0.2%
- CVE-2026-89325 Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation 0.1%
- CVE-2026-77798 Velociraptor Authenticated Denial of Service 0.2%
- CVE-2026-77797 Velociraptor Prefetch parser out of bounds 0.1%
- CVE-2026-19072 Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal 0.4%
- CVE-2026-19584 Velociraptor VQL injection during notebook restore from backup 0.3%
- CVE-2026-19583 Velociraptor Required Permissions bypass by using client monitoring queries 0.6%
- CVE-2026-16895 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails 0.2%
- CVE-2026-19200 Velociraptor Analyst overwrites live built-in artifacts through verify() 0.3%
- CVE-2026-15371 Velociraptor Stored XSS in URL column types 0.4%
- CVE-2026-18652 Velociraptor STACK Type Download Path Bypasses Denied Prefix Check 0.3%
- CVE-2026-64951 Velociraptor DoS triggered by Divide by Zero panic 0.3%
- CVE-2026-64952 Velociraptor Hunt Deletion With Insufficient Permission Check 0.3%
- CVE-2026-64955 Velociraptor CSV Formula Injection in Export Pipeline 0.4%
- CVE-2026-64954 Velociraptor collect_client() Permissions Bypass 0.3%
- CVE-2026-18639 Velociraptor OIDC Authenticator susceptible to email spoofing 0.4%
- CVE-2026-18638 Velociraptor server crash via the SetPassword API 0.4%
- CVE-2026-18640 Velociraptor directory traversal via the NewNotebook API 0.4%
- CVE-2026-18860 Velociraptor incorrect Org deletion permissions check 0.4%
- CVE-2026-17535 Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes 0.2%
- CVE-2026-18636 Velociraptor VFSGetBuffer API path deny list bypass 0.4%