Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:09:07 +0000 CVE-2026-14172 — Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation https://cve.radiocsirt.org/vuln/cve-2026-14172 <p><strong>Affected:</strong> Rapid7 InsightVM, Rapid7 Nexpose, Rapid7 Insight Agent</p> <p>Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.</p> <p><strong>Affected:</strong> Rapid7 InsightVM, Rapid7 Nexpose, Rapid7 Insight Agent</p> <p>Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-14172