Security Advisory

CVE-2026-8659

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-25 00:07:16

Last updated 2026-06-25 12:36:30

Assigner rapid7

CVSS score 6.0

State PUBLISHED

Description

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.

← Browse all CVEs View on cve.org ↗