CVE-2022-4261

CVE-2022-4261 affects Rapid7 Nexpose and InsightVM versions prior to 6.6.172, stemming from insufficient validation of update authenticity. This medium-severity vulnerability (CVSS 6.5) allows an authenticated attacker to provide malicious updates, potentially altering product functionality. Exploitation requires a pre-existing mechanism like social engineering, privileged access, or a Man-in-the-Middle attack. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.