PT-2026-52186 · Rapid7 · Insightconnect Rpm Plugin

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-8665

Mitre

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-8665

Produtos afetados

Insightconnect Rpm Plugin

Referências · 2

• https://extensions.rapid7.com/extension/tr · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-8665 · Nota de Segurança