Threats Tagged 'ghsa-52wr-g3vp-7h6v'

1 threat

Threats Tagged 'ghsa-52wr-g3vp-7h6v'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.2%	CVE-2026-19584Velociraptor · Improper Neutralization of Special Elements Used in a Template Engine High7.7EPSS 0.2%2026-09-10CVE Database V5CVE-2026-19584 CVE-2026-19584 is a vulnerability in Rapid7 Velociraptor affecting versions from 0 up to but not including 0.77.2. It involves improper neutralization of special elements in a template engine used during notebook backup restoration. A user with NOTEBOOK_EDITOR permission can inject a VQL query into notebook cell content, which is then evaluated with elevated permissions upon backup restoration. EPSS 0.2%Vulnerability Rapid7 #cwe-1336 #cwe-94 #ghsa-52wr-g3vp-7h6v	CVE Database V5	2026-09-10

Showing 1–1 of 1 result