agentprime: rapid7-velociraptorEvery new CVE for rapid7-velociraptor.https://agentprime.io/CVE-2026-78413: Velociraptor privilege escalation via SysmonLogForward client monitoring artifacthttps://agentprime.io/advisories/CVE-2026-78413/https://agentprime.io/advisories/CVE-2026-78413/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:48:03 GMTCVECVE-2026-78411: Velociraptor Server Metadata update with Insufficient Permission Checkhttps://agentprime.io/advisories/CVE-2026-78411/https://agentprime.io/advisories/CVE-2026-78411/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:19:26 GMTCVECVE-2026-78412: WatchEvent API streams another organization's live eventshttps://agentprime.io/advisories/CVE-2026-78412/https://agentprime.io/advisories/CVE-2026-78412/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 16:51:34 GMTCVECVE-2026-77798: Velociraptor Authenticated Denial of Servicehttps://agentprime.io/advisories/CVE-2026-77798/https://agentprime.io/advisories/CVE-2026-77798/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 13:50:40 GMTCVECVE-2026-77797: Velociraptor Prefetch parser out of boundshttps://agentprime.io/advisories/CVE-2026-77797/https://agentprime.io/advisories/CVE-2026-77797/CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 13:49:41 GMTCVECVE-2026-19072: Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipalhttps://agentprime.io/advisories/CVE-2026-19072/https://agentprime.io/advisories/CVE-2026-19072/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 12:52:51 GMTCVEcriticalCVE-2026-19584: Velociraptor VQL injection during notebook restore from backuphttps://agentprime.io/advisories/CVE-2026-19584/https://agentprime.io/advisories/CVE-2026-19584/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 03:00:00 GMTCVECVE-2026-19583: Velociraptor Required Permissions bypass by using client monitoring querieshttps://agentprime.io/advisories/CVE-2026-19583/https://agentprime.io/advisories/CVE-2026-19583/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 02:58:11 GMTCVEcriticalCVE-2026-19200: Velociraptor Analyst overwrites live built-in artifacts through verify()https://agentprime.io/advisories/CVE-2026-19200/https://agentprime.io/advisories/CVE-2026-19200/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 03:22:14 GMTCVECVE-2026-15371: Velociraptor Stored XSS in URL column typeshttps://agentprime.io/advisories/CVE-2026-15371/https://agentprime.io/advisories/CVE-2026-15371/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 06:52:28 GMTCVECVE-2026-18652: Velociraptor STACK Type Download Path Bypasses Denied Prefix Checkhttps://agentprime.io/advisories/CVE-2026-18652/https://agentprime.io/advisories/CVE-2026-18652/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 09:56:10 GMTCVECVE-2026-64951: Velociraptor DoS triggered by Divide by Zero panichttps://agentprime.io/advisories/CVE-2026-64951/https://agentprime.io/advisories/CVE-2026-64951/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 09:49:25 GMTCVECVE-2026-64952: Velociraptor Hunt Deletion With Insufficient Permission Checkhttps://agentprime.io/advisories/CVE-2026-64952/https://agentprime.io/advisories/CVE-2026-64952/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 09:44:53 GMTCVECVE-2026-64955: Velociraptor CSV Formula Injection in Export Pipelinehttps://agentprime.io/advisories/CVE-2026-64955/https://agentprime.io/advisories/CVE-2026-64955/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 09:39:26 GMTCVECVE-2026-64954: Velociraptor collect_client() Permissions Bypasshttps://agentprime.io/advisories/CVE-2026-64954/https://agentprime.io/advisories/CVE-2026-64954/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 04:26:32 GMTCVECVE-2026-18639: Velociraptor OIDC Authenticator susceptible to email spoofinghttps://agentprime.io/advisories/CVE-2026-18639/https://agentprime.io/advisories/CVE-2026-18639/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 15:05:42 GMTCVECVE-2026-18638: Velociraptor server crash via the SetPassword APIhttps://agentprime.io/advisories/CVE-2026-18638/https://agentprime.io/advisories/CVE-2026-18638/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 15:00:53 GMTCVECVE-2026-18640: Velociraptor directory traversal via the NewNotebook APIhttps://agentprime.io/advisories/CVE-2026-18640/https://agentprime.io/advisories/CVE-2026-18640/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 14:53:18 GMTCVECVE-2026-18860: Velociraptor incorrect Org deletion permissions checkhttps://agentprime.io/advisories/CVE-2026-18860/https://agentprime.io/advisories/CVE-2026-18860/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 14:52:55 GMTCVECVE-2026-17535: Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumeshttps://agentprime.io/advisories/CVE-2026-17535/https://agentprime.io/advisories/CVE-2026-17535/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 14:47:13 GMTCVECVE-2026-18636: Velociraptor VFSGetBuffer API path deny list bypasshttps://agentprime.io/advisories/CVE-2026-18636/https://agentprime.io/advisories/CVE-2026-18636/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 14:40:12 GMTCVECVE-2026-18635: Velociraptor query plugin allows impersonation in other orgshttps://agentprime.io/advisories/CVE-2026-18635/https://agentprime.io/advisories/CVE-2026-18635/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 14:15:58 GMTCVECVE-2026-18972: Velociraptor authenticated identity-spoofing vulnerabilityhttps://agentprime.io/advisories/CVE-2026-18972/https://agentprime.io/advisories/CVE-2026-18972/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 12:30:52 GMTCVEcriticalCVE-2026-18348: Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL pluginshttps://agentprime.io/advisories/CVE-2026-18348/https://agentprime.io/advisories/CVE-2026-18348/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 05:37:11 GMTCVECVE-2026-8795: Injection in Rapid7 Velociraptorhttps://agentprime.io/advisories/CVE-2026-8795/https://agentprime.io/advisories/CVE-2026-8795/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 01:04:21 GMTCVECVE-2026-6948: Unbounded Memory Allocation in VQLResponse Result-Set Writerhttps://agentprime.io/advisories/CVE-2026-6948/https://agentprime.io/advisories/CVE-2026-6948/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 03 May 2026 23:55:40 GMTCVECVE-2026-5329: Rapid7 Velociraptor Improper Input Validation in Client Message Handlerhttps://agentprime.io/advisories/CVE-2026-5329/https://agentprime.io/advisories/CVE-2026-5329/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 17:52:05 GMTCVECVE-2025-14728: Rapid7 Velociraptor Directory Traversal Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-14728/https://agentprime.io/advisories/CVE-2025-14728/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Dec 2025 19:04:27 GMTCVECVE-2025-0914: Velociraptor Shell Plugin Prevent_execve Bypasshttps://agentprime.io/advisories/CVE-2025-0914/https://agentprime.io/advisories/CVE-2025-0914/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 16:07:49 GMTCVECVE-2024-10526: Rapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Servicehttps://agentprime.io/advisories/CVE-2024-10526/https://agentprime.io/advisories/CVE-2024-10526/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Nov 2024 10:18:05 GMTCVECVE-2023-5950: Rapid7 Velociraptor Reflected XSShttps://agentprime.io/advisories/CVE-2023-5950/https://agentprime.io/advisories/CVE-2023-5950/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Nov 2023 14:30:28 GMTCVECVE-2023-2226: Velociraptor crashes while parsing some malformed PE or OLE files.https://agentprime.io/advisories/CVE-2023-2226/https://agentprime.io/advisories/CVE-2023-2226/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Apr 2023 11:48:46 GMTCVECVE-2022-35632: XSS in User Interfacehttps://agentprime.io/advisories/CVE-2022-35632/https://agentprime.io/advisories/CVE-2022-35632/Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Jul 2022 17:01:01 GMTCVECVE-2022-35631: Filesystem race on temporary fileshttps://agentprime.io/advisories/CVE-2022-35631/https://agentprime.io/advisories/CVE-2022-35631/Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Jul 2022 17:00:46 GMTCVECVE-2022-35630: Unsafe HTML Injection in Artifact Collection Reporthttps://agentprime.io/advisories/CVE-2022-35630/https://agentprime.io/advisories/CVE-2022-35630/Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Jul 2022 17:00:33 GMTCVECVE-2022-35629: Velociraptor Client ID Spoofinghttps://agentprime.io/advisories/CVE-2022-35629/https://agentprime.io/advisories/CVE-2022-35629/Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Jul 2022 17:00:21 GMTCVECVE-2021-3619: Rapid7 Velociraptor Notebooks Authenticated Persistent XSShttps://agentprime.io/advisories/CVE-2021-3619/https://agentprime.io/advisories/CVE-2021-3619/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Aug 2021 19:07:39 GMTCVE