Vendor security team contributor

Rapid7

cited as evidence in 540 · CNA assigner on 1 · credited finder on 2 of 540 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

rapid7.com ↗ · home of the cited advisories

540

records cited in

deterministic count

finder / reporter credits

CVE.org credits

CVE records catalogued (CNA)

assigner

81%

avg modeled exploit prob.

FIRST EPSS, 540/540

33%

ransomware-associated

177 of 540 · CISA flag

Roles across the work

— find / fix / exploit / catalog, computed per record from credit type, the vendor-self-CNA gate, and the linked public exploit catalog

Find

record(s)

Fix

record(s)

Exploit

record(s)

Catalog

record(s)

Each dimension is a count of the listed records where this contributor did that job. A CNA row is fix only when the affected product is the assigner’s own; registries, coordinators, platforms, intel and research houses read as catalog, never fix. Exploit counts records where this contributor is credited as author of a public exploit / detection template in a linked catalog — we link the catalog, never host a payload.

Known for

— recomputed from this contributor’s own records

SurfacesApplication / other (271), Server / web platform (86), Operating system / kernel (73), Edge / remote-access infra (71), Browser (21)

WeaknessInjection (153), Memory safety (67), Authorization / access control (60), Path traversal / file (59), Authentication (55)

PortfolioMicrosoft (107), Adobe (33), Apache (30), Oracle (27), Cisco (16), Ivanti (16)

PeopleNamed individuals credited under this contributor:

Ron Bowes of Rapid7Caitlin Condon of Rapid7

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out

1Front door

530reach this stage

→

2Keys to the kingdom

530reach this stage

→

3Lateral reach

501reach this stage

→

4Data at risk

81reach this stage

→

5Lights out

14reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 81 of 530 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

Recent highlights

— this contributor’s newest known-exploited records

CVE-2015-3246Red Hat9%KEV CVE-2015-5287Red Hat5%KEV CVE-2021-23758Ajax.NET Professional83%KEV CVE-2022-0995Linux9%KEV CVE-2026-18577N-able15%KEV CVE-2026-58644Microsoft16%KEV

Every record they’re cited in

— all 540, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

Cited in 540 known-exploited records — the list below; every one links to its public source.

Catalogued 1 CVE record(s) as the CNA assigner (from CVE.org).

Credited as the finder/reporter on 2 record(s) (CVE.org credits).

Coverage gaps — stated, not hidden

This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.

The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.