PT-2026-52160 · Rapid7 · Insightconnect Sed Plugin

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-9154

NVD

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-9154

Produtos afetados

Insightconnect Sed Plugin

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-9154 · Nota de Segurança
• https://extensions.rapid7.com/extension/sed · Aviso do Fabricante