Rapid7 Disclosure

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)

CVE-2024-0394: Rapid7 Minerva Armor Privilege Escalation (FIXED)

Dani Kamanovsky

CVE-2022-35629..35632 Velociraptor Multiple Vulnerabilities (FIXED)

Vulnerabilities Affecting Four Rapid7 Products (FIXED)

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)