目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Rapid7 厂商漏洞列表 / CVE 中文分析 133

Rapid7 厂商相关 133 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Rapid7 主要提供网络安全解决方案，涵盖漏洞管理与渗透测试工具。其软件历史上常出现远程代码执行、跨站脚本及越权访问等漏洞，累计已收录 85 条 CVE。值得关注的是，其 Metasploit 框架在安全测试领域具有广泛影响力，但过往多次因配置不当或代码缺陷导致严重安全风险。该厂商持续通过补丁更新修复缺陷，以维持企业级安全产品的可靠性与稳定性。

Top products by Rapid7: Velociraptor Nexpose Insight Agent Metasploit Framework AppSpider Pro Metasploit Pro InsightVM Metasploit InsightCloudSec InsightConnect Sed Plugin AppSpider Insight Platform Insight Collector Platform Metasploit-framework InsightConnect TR Plugin InsightConnect Tcpdump Plugin InsightConnect RPM Plugin InsightConnect Compression Plugin InsightConnect Markdown Plugin InsightConnect AWK Plugin InsightConnect Traceroute Plugin InsightConnect SQLmap Plugin InsightConnect Finger Plugin InsightConnect Ping Plugin Komand Vulnerability Management InsightVM/Nexpose Minerva Nexpose Virtual Appliance
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-109682 Metasploit HTTP 重定向 SSRF 漏洞 — Metasploit Framework CWE-918 4.7 Medium 2026-10-20
CVE-2026-109681 Metasploit Framework FTP PASV 响应 SSRF 漏洞 — Metasploit Framework CWE-918 4.7 Medium 2026-10-20
CVE-2026-87689 Metasploit Framework Web Service REST API凭证端点缺少身份验证漏洞 — Metasploit Framework CWE-306 9.8 Critical 2026-10-13
CVE-2026-87690 Metasploit Framework ios_image_gather 路径遍历漏洞 — Metasploit Framework CWE-22 8.8 High 2026-10-12
CVE-2026-78413 Velociraptor SysmonLogForward客户端监控工件提权漏洞 — Velociraptor CWE-276 5.5 Medium 2026-10-05
CVE-2026-78411 Velociraptor 服务器元数据更新权限检查不足漏洞 — Velociraptor CWE-863 6.5 Medium 2026-10-05
CVE-2026-78412 WatchEvent API 泄露其他组织直播事件 — Velociraptor CWE-639 4.9 Medium 2026-10-05
CVE-2026-97228 Rapid7 Bulk Export MCP 导出状态查询 GraphQL 查询注入漏洞 — Platform CWE-943 2.7 Low 2026-09-25
CVE-2026-89325 Rapid7 Insight Agent 本地权限提升漏洞 — Insight Agent CWE-427 7.8 High 2026-09-24
CVE-2026-77798 Velociraptor 身份验证拒绝服务漏洞 — Velociraptor CWE-833 6.5 Medium 2026-09-24
CVE-2026-77797 Velociraptor Prefetch解析器越界漏洞 — Velociraptor CWE-20 3.6 Low 2026-09-24
CVE-2026-19072 Velociraptor调查员通过狩猎有效主体提权至SuperUser漏洞 — Velociraptor CWE-1269 9.9 Critical 2026-09-24
CVE-2026-19584 Rapid7 Velociraptor 代码注入漏洞 — Velociraptor CWE-1336 7.7 High 2026-09-10
CVE-2026-19583 Rapid7 Velociraptor 权限许可和访问控制问题漏洞 — Velociraptor CWE-732 9.9 Critical 2026-09-10
CVE-2026-16895 Rapid7 Metasploit Framework 授权问题漏洞 — Metasploit-framework CWE-305 5.1 Medium 2026-08-27
CVE-2026-19200 Rapid7 Velociraptor 授权问题漏洞 — Velociraptor CWE-862 8.9 High 2026-08-24
CVE-2026-15371 Rapid7 Velociraptor 输入验证错误漏洞 — Velociraptor CWE-177 8.1 High 2026-08-18
CVE-2026-18652 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-862 6.5 Medium 2026-08-12
CVE-2026-64951 Rapid7 velociraptor 数字错误漏洞 — Velociraptor CWE-369 3.5 Low 2026-08-12
CVE-2026-64952 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-863 6.5 Medium 2026-08-12
CVE-2026-64955 Rapid7 Velociraptor 输入验证错误漏洞 — Velociraptor CWE-1236 6.1 Medium 2026-08-12
CVE-2026-64954 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-862 8.2 High 2026-08-12
CVE-2026-18639 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-290 7.3 High 2026-08-11
CVE-2026-18638 Rapid7 velociraptor 异常处理不当漏洞 — Velociraptor CWE-476 6.5 Medium 2026-08-11
CVE-2026-18640 Rapid7 velociraptor 路径遍历漏洞 — Velociraptor CWE-22 7.1 High 2026-08-11
CVE-2026-18860 Rapid7 velociraptor 权限许可和访问控制问题漏洞 — Velociraptor CWE-280 8.7 High 2026-08-11
CVE-2026-17535 Rapid7 velociraptor 缓冲区错误漏洞 — Velociraptor CWE-125 6.2 Medium 2026-08-11
CVE-2026-18636 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-288 6.8 Medium 2026-08-11
CVE-2026-18635 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-863 7.2 High 2026-08-11
CVE-2026-18972 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-290 9.6 Critical 2026-08-11

本页汇总了 Rapid7 厂商截至目前公开的全部 133 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。