R
Vendor security profile
rapid7
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs41
Critical7
CISA KEV0
Public exploit1
Patch rate%10
Avg. CVSS7.1
12-month vulnerability rate
0
1
0
0
0
1
2
9
0
17
7
3
CVE KEV
CVE severity distribution
41toplam CVE
Critical7 (17%)
High15 (37%)
Medium15 (37%)
Low4 (10%)
Patch and exploitation view
%10
Verified patch
%0
CISA KEV
%2
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
37Unknown
Latest vulnerabilities
5.5
CVE-2026-78413
Velociraptor privilege escalation via SysmonLogForward client monitoring artifact
R
Patch status unknownEPSS %0
6.5
CVE-2026-78411
Velociraptor Server Metadata update with Insufficient Permission Check
R
Patch status unknownEPSS %0
4.9
CVE-2026-78412
WatchEvent API streams another organization's live events
R
Patch status unknownEPSS %0
2.7
CVE-2026-97228
Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup
R
Patch status unknownEPSS %0
7.8
CVE-2026-89325
Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation
R
Patch status unknownEPSS %0
6.5
CVE-2026-77798
Velociraptor Authenticated Denial of Service
R
Patch status unknownEPSS %0
3.6
CVE-2026-77797
Velociraptor Prefetch parser out of bounds
R
Patch status unknownEPSS %0
9.9
CVE-2026-19072
Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
R
Patch status unknownEPSS %0
7.7
CVE-2026-19584
Velociraptor VQL injection during notebook restore from backup
R
Patch verifiedEPSS %0
9.9
CVE-2026-19583
Velociraptor Required Permissions bypass by using client monitoring queries
R
Patch verifiedEPSS %1