What’s Vulnerable › Products

Rapid7 InsightVM vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Rapid7 InsightVM version is affected

Latest Rapid7 InsightVM vulnerabilities

• CVE-2026-14172 — Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation (CVSS 7.8)
• CVE-2024-6504 — Rapid7 InsightVM Protection Mechanism Failure (CVSS 5.3)
• CVE-2024-3185 — Rapid7 Insight Agent Sensitive Key Exposed To Local Users (CVSS 6.8)
• CVE-2024-2745 — Rapid7 InsightVM Sensitive Information Exposure via URL (CVSS 3.3)
• CVE-2021-3844 — Rapid7 InsightVM Insufficient Session Expiration (CVSS 5.4)
• CVE-2023-0681 — Rapid7 Nexpose Uncontrolled URL Redirect (CVSS 6.1)
• CVE-2017-5242 — Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key (CVSS 7.7)
• CVE-2022-4261 — Rapid7 Nexpose Update Validation Issue (CVSS 6.5)
• CVE-2019-5641 — Rapid7 InsightVM Information Disclosure after Logout (CVSS 5.3)
• CVE-2019-5615 — Rapid7 InsightVM Stored Credential Exposure (CVSS 6.5)