PT-2026-52183 · Rapid7 · Insightconnect Awk Plugin

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-8592

Mitre

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

OS Command Injection vulnerability in the process string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-8592

Produtos afetados

Insightconnect Awk Plugin

Referências · 2

• https://extensions.rapid7.com/extension/awk · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-8592 · Nota de Segurança