CVE-2026-18638 in Velociraptor
Zusammenfassung
von MITRE • 11.08.2026
Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.