{"vulnerability": "cve-2026-19072", "sightings": [{"uuid": "ff887304-78b0-413d-b932-09aceae9270b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117326258214428675", "content": "CVE-2026-19072 (CRITICAL, CVSS 9.9) impacts Rapid7 Velociraptor <0.77.2. 'Investigator' role can escalate to admin by injecting arbitrary VQL via API. Patch by upgrading to 0.77.2+. Details: https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velociraptor-1faa73dd4a3adad9 #OffSeq #Velociraptor #CVE #Infosec", "creation_timestamp": "2026-09-24T13:30:26.543361Z"}, {"uuid": "1b6b07b0-57f9-4587-af83-35133c9dd37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwbeh73ktv2b", "content": "CRITICAL: Rapid7 Velociraptor <0.77.2 has a privilege escalation flaw (CVE-2026-19072, CVSS 9.9). 'Investigator' users can gain admin by injecting VQL. Upgrade to 0.77.2+ ASAP. https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velocira...", "creation_timestamp": "2026-09-24T13:30:28.660662Z"}, {"uuid": "b6cdf379-0360-40d8-baf7-36ebbae7e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbep2jegn2k", "content": "\ud83d\udd34 CVE-2026-19072 - Critical (9.9)\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19072/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T13:34:52.910693Z"}, {"uuid": "73f0192b-ce44-4057-b1cc-32c0d361b71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbeyf3spn25", "content": "CVE-2026-19072 - velociraptor\nIn Velociraptor, a user with the investigator role can change an internal setting that lets them run any query on the server, bypassing normal permission checks. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-09-24T13:40:04.690518Z"}, {"uuid": "35fb2d23-5c4e-418d-9457-ccb753addd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwbgiztmbx2u", "content": "\ud83d\udea8 CVE-2026-19072 \u2014 CVSS 9.9 CRITICAL\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19072\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T14:07:16.971885Z"}]}