What is CVE-2026-17535?

CVE-2026-17535 is a medium-severity vulnerability in Rapid7 Velociraptor, classified under Out-of-bounds Read. CVSS score: 6.2/10. Published 2026-08-11.

How severe is CVE-2026-17535?

Medium severity. CVSS v3 base score is 6.2 out of 10.

Out-of-bounds Read in Rapid7 Velociraptor

CVE-2026-17535

Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Rapid7 Velociraptor — versions 0

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read
CWE-369 — Divide By Zero
CWE-789

References

cve@rapid7.com

Frequently asked questions

What is CVE-2026-17535?: CVE-2026-17535 is a medium-severity vulnerability in Rapid7 Velociraptor, classified under Out-of-bounds Read. CVSS score: 6.2/10. Published 2026-08-11.
How severe is CVE-2026-17535?: Medium severity. CVSS v3 base score is 6.2 out of 10.