Known Vulnerabilities for Velociraptor by Symantec
Listed below are 7 of the newest known vulnerabilities associated with "Velociraptor" by "Symantec".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64955 json | When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV fil... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-64954 json | Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they re... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-64952 json | The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECT_... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-64951 json | A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occu... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-18860 json | Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create ... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-18652 json | Velociraptor allows reading Stacked result sets from the GUI. Velociraptor's multi-tenant design stores sub orgs within the... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-18639 json | When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some I... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-18638 json | Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server proces... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-18636 json | The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from re... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-18635 json | Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to ru... | Not Provided | 2026-08-11 | 2026-08-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Symantec | Velociraptor | - |