InsightVM vulnerabilities

1 known vulnerability in InsightVM from Rapid7. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  InsightVM: Execution with Unnecessary Privileges

  CVE-2026-14172Jul 24, 2026Rapid7

  Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight