DeutschShown in its original language — a full translation is planned for a future version.
Rapid7 Velociraptor: Mehrere Schwachstellen
view advisory published 2026-04-15
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren, was möglicherweise die Ausführung von beliebigem Code ermöglicht.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-6290US | critical9.1OT elevated | — | ||
Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token. This allows an authenticated… | ||||
| CVE-2026-5329US | medium6.5 | — | ||
Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan