https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:21:32.733768+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0757 CVE-2022-0757 — Rapid7 Nexpose SQL Injection 2026-10-05T15:21:32.756205+00:00

Affected: Rapid7 Nexpose

Rapid7 Nexpose versions 6.6.93 and earlier are susceptible to an SQL Injection vulnerability, whereby valid search operators are not defined. This lack of validation can allow a logged-in, authenticated attacker to manipulate the "ANY" and "OR" operators in the SearchCriteria and inject SQL code. This issue was fixed in Rapid7 Nexpose version 6.6.129.