Known Vulnerabilities for Velociraptor by Rapid7
Listed below are 10 of the newest known vulnerabilities associated with "Velociraptor" by "Rapid7".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-18348 json | Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-8795 json | A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76... | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-7573 json | Not Provided | 2026-05-06 | 2026-07-24 | |
| CVE-2026-7572 json | Not Provided | 2026-05-06 | 2026-07-24 | |
| CVE-2026-6290 json | Not Provided | 2026-04-15 | 2026-04-23 | |
| CVE-2026-5329 json | Not Provided | 2026-04-09 | 2026-04-28 | |
| CVE-2023-5950 json | Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability ... | 6.1 - MEDIUM | 2023-11-06 | 2023-11-14 |
| CVE-2023-2226 json | Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker... | 5.3 - MEDIUM | 2023-04-21 | 2023-05-03 |
| CVE-2023-0290 json | Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory trave... | 4.3 - MEDIUM | 2023-01-18 | 2023-11-07 |
| CVE-2023-0242 json | Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed ... | 8.8 - HIGH | 2023-01-18 | 2023-11-07 |