Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Rapid7 CVE-2026-121139
The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that th
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit
-
Rapid7 CVE-2026-115805
Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploita
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit
-
Rapid7 CVE-2026-87690
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpol
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Rapid7 rapid7-2026-10
Rapid7 Security Releases - October 2026
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit