{"uuid": "e0842eef-a665-450e-8ffe-9cef031c4662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18972", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msspwvfmu422", "content": "Rapid7 Velociraptor &lt;0.77.2 hit by CRITICAL CVE-2026-18972 \u2014 auth bypass lets low-priv users spoof admins for account takeover. No patch yet: restrict access, monitor logs. https://radar.offseq.com/threat/cve-2026-18972-cwe-290-authentication-bypass-by-spoofing-in-rapid7-velociraptor-72ecf6c68bed...", "creation_timestamp": "2026-08-11T13:30:35.974206Z"}