Vulnerabilidades do Rapid7 Nexpose
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Rapid7 Nexpose: 1 registro(s), com versões afetadas e correções.
CVE-2026-14172
Alta · 7.8
CWE-250 24/07/2026
Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.