Rapid responses
runZero’s Rapid Response program provides immediate detection and notification of emerging threats. Each Rapid Response includes a query to find matching assets, a trigger to analyze all inventories for exposure, and a corresponding blog post with the details of the issue. This program focuses on helping customers mitigate exposures before compromise.
Vulnerabilities covered by the Rapid Response program are replaced by more specific coverage as mitigations become available.
Latest Rapid Responses
| Date | Name | Type | Severity | Query | US SaaS Link | EU SaaS Link |
|---|---|---|---|---|---|---|
| 12/24/2025 | Rapid Response: MongoDB Pre-Authentication Memory Leak (CVE-2025-14847) | software | High | (vendor:=MongoDB AND (product:=MongoDB OR product:="MongoDB MongoDB")) OR (product:="MongoDB%Server") AND (version:>0 AND (version:>=3.6.0 AND version:<3.7) OR (version:>=4.0.0 AND version:<4.1) OR (version:>=4.2.0 AND version:<4.3) OR (version:>=4.4.0 AND version:<4.4.30) OR (version:>=5.0.0 AND version:<5.0.32) OR (version:>=6.0.0 AND version:<6.0.27) OR (version:>=7.0.0 AND version:<7.0.28) OR (version:>=8.0.0 AND version:<8.0.17) OR (version:>=8.2.0 AND version:<8.2.3)) | Link | Link |
| 12/19/2025 | Rapid Response: WatchGuard Firebox IKED RCE (CVE-2025-14733) | assets | Info | os:="WatchGuard Fireware" | Link | Link |
| 12/18/2025 | Rapid Response: HPE OneView Remote Code Execution (CVE-2025-37164) | software | Info | (vendor:="HP" AND product:="Oneview") OR (vendor:="HPE" AND product:="OneView") | Link | Link |
| 12/17/2025 | Rapid Response: Cisco Secure Email Gateway and Web Manager (CVE-2025-20393) | services | Info | _asset.protocol:=http AND protocol:=http AND last.html.title:"Cisco%Gateway%C" AND NOT last.html.title:"Cloud" | Link | Link |
| 12/10/2025 | Rapid Response: Gogs File Overwrite Vulnerability (CVE-2025-8110) | services | Info | _asset.protocol:=http AND protocol:=http AND favicon.ico.image.md5:=5f5b7539f014b9996959f5dcd063d383 | Link | Link |
| 12/03/2025 | Rapid Response: Vercel Next.js React Server Components RCE (CVE-2025-55182) | software | Info | (vendor:=Zeit OR vendor:=Vercel) AND (product:=Next.Js OR product:=Next.js) | Link | Link |
| 11/21/2025 | Rapid Response: Grafana Enterprise Privilege Escalation | software | Info | vendor:="Grafana Labs" AND (product:="GrafanaEnterprise" OR product:="Grafana Enterprise") AND (version:>0 AND version:>="12.0.0" AND version:<"12.3.0") | Link | Link |
| 11/20/2025 | Rapid Response: Oracle Identity Manager Authentication Bypass | software | Info | vendor:="Oracle" AND product:="Identity Manager" | Link | Link |
| 11/18/2025 | Rapid Response: Fortinet FortiVoice SQL Injection (CVE-2025-58692) | assets | High | hw:="Fortinet%" AND type:="SIP Gateway" AND ((osversion:>"7.2.0" AND osversion:<"7.2.3") OR (osversion:>"7.0.0" AND osversion:<"7.0.8")) | Link | Link |
| 11/14/2025 | Rapid Response: Multiple Fortinet Products Authentication Bypass (CVE-2025-59718 and CVE-2025-59719) | assets | Info | product:"Fortinet FortiWeb" OR (os:="Fortinet FortiOS" AND os_version:>0 AND ((os_version:>="7.6.0" AND os_version:<="7.6.3") OR (os_version:>="7.4.0" AND os_version:<="7.4.8") OR (os_version:>="7.2.0" AND os_version:<="7.2.11") OR (os_version:>="7.0.0" AND os_version:<="7.0.17"))) | Link | Link |
| 11/14/2025 | Rapid Response: Fortinet FortiWeb Relative Path Traversal (CVE-2025-64446) | assets | Info | product:"Fortinet FortiWeb" | Link | Link |
| 11/12/2025 | Rapid Response: Gladinet Triofox Multiple Vulnerabilities (2025-11) | services | Info | _asset.protocol:http AND protocol:http AND favicon.ico.image.md5:="bf2c9797fd72c284d99d116e1e02ea18" | Link | Link |
| 11/10/2025 | Rapid Response: Monsta FTP RCE (CVE-2025-34299) | services | Info | _asset.protocol:http AND protocol:http AND favicon.ico.image.mmh3:="1535999103" | Link | Link |
| 11/06/2025 | Rapid Response: CWP (Control Web Panel) OS Command Injection (CVE-2025-48703) | software | Info | vendor:="CentOS WebPanel" product:="CentOS Web Panel" | Link | Link |
| 11/03/2025 | Rapid Response: Veeam Backup & Replication RCE Multiple Vulnerabilities (2025-10) | software | Critical | vendor:=Veeam AND product:="Veeam Backup & Replication" AND (version:>0 AND version:>=12 AND version:<12.3.2.4165) | Link | Link |
Updated