目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Rapid7 厂商漏洞列表 / CVE 中文分析 121

Rapid7 厂商相关 121 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Rapid7 主要提供网络安全解决方案，涵盖漏洞管理与渗透测试工具。其软件历史上常出现远程代码执行、跨站脚本及越权访问等漏洞，累计已收录 85 条 CVE。值得关注的是，其 Metasploit 框架在安全测试领域具有广泛影响力，但过往多次因配置不当或代码缺陷导致严重安全风险。该厂商持续通过补丁更新修复缺陷，以维持企业级安全产品的可靠性与稳定性。

Top products by Rapid7: Velociraptor Nexpose Insight Agent AppSpider Pro Metasploit Pro Metasploit Framework InsightVM Metasploit InsightCloudSec InsightConnect Sed Plugin AppSpider Insight Platform Insight Collector Metasploit-framework InsightConnect TR Plugin InsightConnect Tcpdump Plugin InsightConnect RPM Plugin InsightConnect Compression Plugin InsightConnect Markdown Plugin InsightConnect AWK Plugin InsightConnect Traceroute Plugin InsightConnect SQLmap Plugin InsightConnect Finger Plugin InsightConnect Ping Plugin Komand Vulnerability Management InsightVM/Nexpose Minerva Nexpose Virtual Appliance Nexpose hardware appliance
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-19584 Velociraptor 恢复时VQL注入漏洞 — Velociraptor CWE-1336 7.7 High 2026-09-10
CVE-2026-19583 Velociraptor 权限提升漏洞 — Velociraptor CWE-732 9.9 Critical 2026-09-10
CVE-2026-16895 Rapid7 Metasploit Framework 授权问题漏洞 — Metasploit-framework CWE-305 5.1 Medium 2026-08-27
CVE-2026-19200 Rapid7 Velociraptor 授权问题漏洞 — Velociraptor CWE-862 8.9 High 2026-08-24
CVE-2026-15371 Rapid7 Velociraptor 输入验证错误漏洞 — Velociraptor CWE-177 8.1 High 2026-08-18
CVE-2026-18652 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-862 6.5 Medium 2026-08-12
CVE-2026-64951 Rapid7 velociraptor 数字错误漏洞 — Velociraptor CWE-369 3.5 Low 2026-08-12
CVE-2026-64952 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-863 6.5 Medium 2026-08-12
CVE-2026-64955 Rapid7 Velociraptor 输入验证错误漏洞 — Velociraptor CWE-1236 6.1 Medium 2026-08-12
CVE-2026-64954 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-862 8.2 High 2026-08-12
CVE-2026-18639 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-290 7.3 High 2026-08-11
CVE-2026-18638 Rapid7 velociraptor 异常处理不当漏洞 — Velociraptor CWE-476 6.5 Medium 2026-08-11
CVE-2026-18640 Rapid7 velociraptor 路径遍历漏洞 — Velociraptor CWE-22 7.1 High 2026-08-11
CVE-2026-18860 Rapid7 velociraptor 权限许可和访问控制问题漏洞 — Velociraptor CWE-280 8.7 High 2026-08-11
CVE-2026-17535 Rapid7 velociraptor 缓冲区错误漏洞 — Velociraptor CWE-125 6.2 Medium 2026-08-11
CVE-2026-18636 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-288 6.8 Medium 2026-08-11
CVE-2026-18635 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-863 7.2 High 2026-08-11
CVE-2026-18972 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-290 9.6 Critical 2026-08-11
CVE-2026-18348 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-863 4.1 Medium 2026-08-11
CVE-2026-14172 Rapid7 InsightVM 权限许可和访问控制问题漏洞 — InsightVM CWE-250 7.8 High 2026-07-24
CVE-2026-8661 Rapid7 InsightConnect Markdown Plugin 跨站脚本漏洞 — InsightConnect Markdown Plugin CWE-79 4.8 Medium 2026-06-26
CVE-2026-8658 Rapid7 InsightConnect Tcpdump Plugin 命令注入漏洞 — InsightConnect Tcpdump Plugin CWE-78 6.0 Medium 2026-06-25
CVE-2026-8662 Rapid7 InsightConnect Compression Plugin 路径遍历漏洞 — InsightConnect Compression Plugin CWE-22 3.3 Low 2026-06-25
CVE-2026-8666 Rapid7 InsightConnect Traceroute Plugin 命令注入漏洞 — InsightConnect Traceroute Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-8592 Rapid7 InsightConnect AWK Plugin 命令注入漏洞 — InsightConnect AWK Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-8664 Rapid7 InsightConnect Finger Plugin 命令注入漏洞 — InsightConnect Finger Plugin CWE-78 6.0 Medium 2026-06-25
CVE-2026-8665 Rapid7 InsightConnect TR Plugin 命令注入漏洞 — InsightConnect TR Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-8660 Rapid7 InsightConnect Ping Plugin 命令注入漏洞 — InsightConnect Ping Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-9153 Rapid7 InsightConnect Sed Plugin 信息泄露漏洞 — InsightConnect Sed Plugin CWE-22 6.5 Medium 2026-06-25
CVE-2026-9154 Rapid7 InsightConnect Sed Plugin 路径遍历漏洞 — InsightConnect Sed Plugin CWE-22 7.1 High 2026-06-25

本页汇总了 Rapid7 厂商截至目前公开的全部 121 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。