5
CVEs
1
Critical
3
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
3
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (30)
Velociraptor
27
Nexpose
18
Metasploit
15
Insight Agent
8
Appspider Pro
6
Insightvm
6
Insightappsec
4
Insightconnect Sed Plugin
3
Python
3
Insightcloudsec
3
OpenSSL
2
Insightconnect Finger Plugin
1
Insight Platform
1
Insightconnect Sqlmap Plugin
1
Insightconnect Tcpdump Plugin
1
Java
1
SSH
1
Insightconnect Ping Plugin
1
Metasploit Pro
1
Insightconnect Markdown Plugin
1
Insightconnect Compression Plugin
1
Insightconnect Rpm Plugin
1
Insightconnect Tr Plugin
1
Open Redirect
1
Insight Collector
1
Insightconnect Awk Plugin
1
PostgreSQL
1
Appspider
1
Komand
1
Ssti
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-19583 | Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwise-restricted artifacts - including Linux.Sys.BashShell - to execute arbitrary commands on managed endpoints. The server enforced the EXECVE permission for scheduling command-execution artifacts through normal collection, but applied no equivalent permission or CLIENT_EVENTS-type check on the client monitoring path, so a low-privileged operator can bypass the gate entirely. No public exploit identified at time of analysis, though the upstream fix (PR #4967) makes the missing check straightforward to reconstruct. | CRITICAL | 9.9 | 0.6% | 50 |
|
| CVE-2026-19200 | Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role - to overwrite global artifacts without the elevated permissions normally required for such operations. The `verify()` VQL function, designed only for syntax validation, incorrectly writes submitted artifacts into the shared global repository rather than a temporary local scope, effectively bypassing authorization controls (CWE-862). No public exploit or CISA KEV listing has been identified at time of analysis, but the low privilege bar and network accessibility make this a meaningful internal threat in Velociraptor deployments. | HIGH | 8.9 | 0.2% | 45 |
|
| CVE-2026-15371 | Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, enabling a high-privileged attacker to inject javascript: URIs that execute when a second user clicks the crafted link in the console. The scope change (S:C) in the CVSS vector confirms the XSS crosses the application's security boundary into the victim's browser session, exposing session tokens and permitting authenticated actions on behalf of the victim. No public exploit code or CISA KEV listing has been identified at time of analysis, but the C:H/I:H impact scores reflect meaningful credential theft and session hijacking potential within the Velociraptor investigation console. | HIGH | 8.1 | 0.2% | 41 |
|
| CVE-2026-19584 | Template injection in Velociraptor's notebook backup restoration pipeline allows a low-privileged NOTEBOOK_EDITOR user to execute arbitrary VQL queries at elevated server-level permissions. The daily backup feature - enabled by default - captures notebook cell content verbatim; when an administrator later restores the backup, that content is interpolated into a Go template without ACL enforcement, breaking the privilege boundary between analyst and server roles. No public exploit has been identified at time of analysis, but the chained attack path (plant payload, wait for restore) represents a credible insider or compromised-analyst escalation vector against DFIR infrastructure. | HIGH | 7.7 | 0.2% | 39 |
|
| CVE-2026-16895 | Unauthenticated local access to Metasploit Framework's JSON-RPC dispatcher is possible via a fail-open logic flaw (CWE-305) in the ApiToken Warden authentication strategy. When the MSF_WS_JSON_RPC_API_TOKEN environment variable is unset and the db.check health-check method raises an exception, the internal msf.auth_initialized flag is reset to false - which the Warden misinterprets as authentication being uninitialised rather than failed, bypassing token enforcement entirely. A vendor-released upstream fix is available via GitHub PR #21768; no public exploit code and no CISA KEV listing have been identified at time of analysis. | MEDIUM | 5.1 | 0.2% | 26 |
|