CVE-2017-5232: RAPID7 Nexpose

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Affected products

• RAPID7 Nexpose: up to and including 6.4.23

Published 2017-03-02. Last modified 2026-06-17.