Rapid7 Velociraptor

• CVE-2026-78413 Medium 5.5 Velociraptor privilege escalation via SysmonLogForward client monitoring artifact 0.2%
• CVE-2026-78411 Medium 6.5 Velociraptor Server Metadata update with Insufficient Permission Check 0.2%
• CVE-2026-78412 Medium 4.9 WatchEvent API streams another organization's live events 0.2%
• CVE-2026-77798 Medium 6.5 Velociraptor Authenticated Denial of Service 0.2%
• CVE-2026-77797 Low 3.6 Velociraptor Prefetch parser out of bounds 0.1%
• CVE-2026-19072 Critical 9.9 Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal 0.4%
• CVE-2026-19584 High 7.7 Velociraptor VQL injection during notebook restore from backup 0.3%
• CVE-2026-19583 Critical 9.9 Velociraptor Required Permissions bypass by using client monitoring queries 0.6%
• CVE-2026-19200 High 8.9 Velociraptor Analyst overwrites live built-in artifacts through verify() 0.3%
• CVE-2026-15371 High 8.1 Velociraptor Stored XSS in URL column types 0.4%
• CVE-2026-18652 Medium 6.5 Velociraptor STACK Type Download Path Bypasses Denied Prefix Check 0.3%
• CVE-2026-64951 Low 3.5 Velociraptor DoS triggered by Divide by Zero panic 0.3%
• CVE-2026-64952 Medium 6.5 Velociraptor Hunt Deletion With Insufficient Permission Check 0.3%
• CVE-2026-64955 Medium 6.1 Velociraptor CSV Formula Injection in Export Pipeline 0.4%
• CVE-2026-64954 High 8.2 Velociraptor collect_client() Permissions Bypass 0.3%
• CVE-2026-18639 High 7.3 Velociraptor OIDC Authenticator susceptible to email spoofing 0.4%
• CVE-2026-18638 Medium 6.5 Velociraptor server crash via the SetPassword API 0.4%
• CVE-2026-18640 High 7.1 Velociraptor directory traversal via the NewNotebook API 0.4%
• CVE-2026-18860 High 8.7 Velociraptor incorrect Org deletion permissions check 0.4%
• CVE-2026-17535 Medium 6.2 Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes 0.2%
• CVE-2026-18636 Medium 6.8 Velociraptor VFSGetBuffer API path deny list bypass 0.4%
• CVE-2026-18635 High 7.2 Velociraptor query plugin allows impersonation in other orgs 0.5%
• CVE-2026-18972 Critical 9.6 Velociraptor authenticated identity-spoofing vulnerability 0.4%
• CVE-2026-18348 Medium 4.1 Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins 0.3%
• CVE-2026-8795 High 7.8 A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inser 0.1%
• CVE-2026-6863 Medium 6.8 HTTP Filestore Endpoints Misapply Permissions Across Organizations 0.2%
• CVE-2026-6948 Medium 4.9 Unbounded Memory Allocation in VQLResponse Result-Set Writer 0.3%
• CVE-2026-6290 High 8.0 Velociraptor Query() Plugin Misapplies Permissions To Orgs 0.2%
• CVE-2026-5329 High 8.5 Rapid7 Velociraptor Improper Input Validation in Client Message Handler 0.5%
• CVE-2025-14728 Medium 6.8 Rapid7 Velociraptor Directory Traversal Vulnerability 0.6%
• CVE-2025-6264 Medium 5.5 Velociraptor priviledge escalation via UpdateConfig artifact 1.0%
• CVE-2025-0914 Low 3.8 Velociraptor Shell Plugin Prevent_execve Bypass 0.2%
• CVE-2024-10526 High 8.6 Rapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Service 0.2%
• CVE-2023-5950 High 8.6 Rapid7 Velociraptor Reflected XSS 0.5%
• CVE-2023-2226 Low 3.3 Velociraptor crashes while parsing some malformed PE or OLE files. 0.4%
• CVE-2023-0290 Medium 4.3 Rapid7 Velociraptor directory traversal in client ID parameter 0.8%
• CVE-2023-0242 High 8.8 Insufficient permission check in the VQL copy() function 0.6%
• CVE-2022-35632 Unrated XSS in User Interface 0.5%
• CVE-2022-35631 Unrated Filesystem race on temporary files 0.2%
• CVE-2022-35630 Unrated Unsafe HTML Injection in Artifact Collection Report 0.5%
• CVE-2022-35629 Unrated Velociraptor Client ID Spoofing 0.5%
• CVE-2021-3619 Low 3.5 Rapid7 Velociraptor Notebooks Authenticated Persistent XSS 0.6%