目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Rapid7 厂商漏洞列表 / CVE 中文分析 133

Rapid7 厂商相关 133 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Rapid7 主要提供网络安全解决方案，涵盖漏洞管理与渗透测试工具。其软件历史上常出现远程代码执行、跨站脚本及越权访问等漏洞，累计已收录 85 条 CVE。值得关注的是，其 Metasploit 框架在安全测试领域具有广泛影响力，但过往多次因配置不当或代码缺陷导致严重安全风险。该厂商持续通过补丁更新修复缺陷，以维持企业级安全产品的可靠性与稳定性。

Top products by Rapid7: Velociraptor Nexpose Insight Agent Metasploit Framework AppSpider Pro Metasploit Pro InsightVM Metasploit InsightCloudSec InsightConnect Sed Plugin AppSpider Insight Platform Insight Collector Platform Metasploit-framework InsightConnect TR Plugin InsightConnect Tcpdump Plugin InsightConnect RPM Plugin InsightConnect Compression Plugin InsightConnect Markdown Plugin InsightConnect AWK Plugin InsightConnect Traceroute Plugin InsightConnect SQLmap Plugin InsightConnect Finger Plugin InsightConnect Ping Plugin Komand Vulnerability Management InsightVM/Nexpose Minerva Nexpose Virtual Appliance
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-18348 Rapid7 velociraptor 授权问题漏洞 — Velociraptor CWE-863 4.1 Medium 2026-08-11
CVE-2026-14172 Rapid7 InsightVM 权限许可和访问控制问题漏洞 — InsightVM CWE-250 7.8 High 2026-07-24
CVE-2026-8661 Rapid7 InsightConnect Markdown Plugin 跨站脚本漏洞 — InsightConnect Markdown Plugin CWE-79 4.8 Medium 2026-06-26
CVE-2026-8658 Rapid7 InsightConnect Tcpdump Plugin 命令注入漏洞 — InsightConnect Tcpdump Plugin CWE-78 6.0 Medium 2026-06-25
CVE-2026-8662 Rapid7 InsightConnect Compression Plugin 路径遍历漏洞 — InsightConnect Compression Plugin CWE-22 3.3 Low 2026-06-25
CVE-2026-8666 Rapid7 InsightConnect Traceroute Plugin 命令注入漏洞 — InsightConnect Traceroute Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-8592 Rapid7 InsightConnect AWK Plugin 命令注入漏洞 — InsightConnect AWK Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-8664 Rapid7 InsightConnect Finger Plugin 命令注入漏洞 — InsightConnect Finger Plugin CWE-78 6.0 Medium 2026-06-25
CVE-2026-8665 Rapid7 InsightConnect TR Plugin 命令注入漏洞 — InsightConnect TR Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-8660 Rapid7 InsightConnect Ping Plugin 命令注入漏洞 — InsightConnect Ping Plugin CWE-78 7.7 High 2026-06-25
CVE-2026-9153 Rapid7 InsightConnect Sed Plugin 信息泄露漏洞 — InsightConnect Sed Plugin CWE-22 6.5 Medium 2026-06-25
CVE-2026-9154 Rapid7 InsightConnect Sed Plugin 路径遍历漏洞 — InsightConnect Sed Plugin CWE-22 7.1 High 2026-06-25
CVE-2026-9155 Rapid7 InsightConnect Sed Plugin 命令注入漏洞 — InsightConnect Sed Plugin CWE-78 8.8 High 2026-06-25
CVE-2026-8659 Rapid7 InsightConnect SQLmap Plugin 命令注入漏洞 — InsightConnect SQLmap Plugin CWE-78 6.0 Medium 2026-06-25
CVE-2026-8663 Rapid7 InsightConnect RPM Plugin 命令注入漏洞 — InsightConnect RPM Plugin CWE-78 6.0 Medium 2026-06-24
CVE-2026-8795 Rapid7 Velociraptor 注入漏洞 — Velociraptor CWE-74 7.8 High 2026-06-09
CVE-2026-7373 Rapid7 Metasploit Pro 访问控制错误漏洞 — Metasploit Pro CWE-829 - - 2026-05-15
CVE-2026-6863 Velociraptor 安全漏洞 — Velociraptor CWE-863 6.8 Medium 2026-05-06
CVE-2026-6948 Velociraptor 安全漏洞 — Velociraptor CWE-770 4.9 Medium 2026-05-03
CVE-2026-6482 Rapid7 Insight Agent 安全漏洞 — Insight Agent CWE-829 7.8AI High AI 2026-04-17
CVE-2026-6290 Velociraptor 安全漏洞 — Velociraptor CWE-863 8.0 High 2026-04-15
CVE-2026-4482 Rapid7 Insight Agent 安全漏洞 — Insight Agent CWE-732 7.1 - 2026-04-10
CVE-2026-5329 Rapid7 Velociraptor 安全漏洞 — Velociraptor CWE-20 8.5 High 2026-04-09
CVE-2026-4837 Rapid7 Insight Agent 安全漏洞 — Insight Agent CWE-95 6.6 Medium 2026-04-08
CVE-2026-1568 Rapid7 InsightVM 安全漏洞 — Vulnerability Management CWE-347 9.6 Critical 2026-02-03
CVE-2026-1814 Rapid7 Nexpose 安全漏洞 — InsightVM/Nexpose CWE-331 9.1AI Critical AI 2026-02-03
CVE-2025-14728 Rapid7 Velociraptor 安全漏洞 — Velociraptor CWE-22 6.8 Medium 2025-12-29
CVE-2025-11195 Rapid7 AppSpider Pro 数据伪造问题漏洞 — AppSpider Pro CWE-20 3.3 Low 2025-09-30
CVE-2025-36857 Rapid7 AppSpider Pro 安全漏洞 — Appspider Pro CWE-276 3.3 Low 2025-09-25
CVE-2025-6264 Velociraptor 安全漏洞 — Velociraptor CWE-276 5.5 Medium 2025-06-20

本页汇总了 Rapid7 厂商截至目前公开的全部 133 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。