Velociraptor

A vulnerability tracked as EUVD-2026-92536 has been documented in Velociraptor, the endpoint monitoring and forensics tool owned by Rapid7. The flaw carries a CVSS v3.1 score of 5.5, a moderate severity rating. Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints, and these artifacts can be used to do essentially anything on a system, typically running with elevated privileges, which is why the disclosure is drawing attention from the security community.