Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Rapid7 Nexpose | 0-Doubt

Home
Vendors
Rapid7
Rapid7 Nexpose

Home
Vendors
Vulnerability Management
Rapid7 Nexpose

Rapid7 Nexpose

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 87 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

On-premise vulnerability scanner with asset discovery and risk prioritization

by Rapid7 · rapid7.com · source ↗

Screenshots

1

Rapid7 Nexpose — screenshot

Known CVEs (87)2 new

CVE-2026-97228 ↗LOW 2.7new2026
Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component (`get_export_status` in `src/export_manager.py`), whereby the `export_id`…
CVE-2026-89325 ↗HIGH 7.8new2026
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable …

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Vulnerability Management products

Qualys Patch Management · Qualys
Qualys TruConfirm · Qualys
Qualys VMDR · Qualys
Rapid7 InsightVM · Rapid7
RapidFire Tools Network Detective Pro · RapidFire Tools
Rebasoft Scan-less Agent-less Vulnerability Management · rebasoft
Rebasoft Secure Configuration · rebasoft
Reclaim Security Platform · Reclaim Security

CVE-2026-14172 ↗HIGH 7.82026

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as t…

…and 84 more · see all on the vendor page →