← Retour à la recherche de CVE

CVE-2026-8658

Rapid7 InsightConnect Tcpdump Plugin

Description

OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction.

CVSS 6EPSS 0.8330000000000001%Risque 0.64
Voir la source
Publication
2026-06-25 03:16:44
Versions concernées
unknown
Type
Application web
Vecteur
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
Systèmes d’exploitation
Linux