PT-2026-52189 · Rapid7 · Insightconnect Compression Plugin

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-8662

Mitre

CVSS v3.1

3.3

Baixa

Vetor base

AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

Path Traversal vulnerability in the create archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-8662

Produtos afetados

Insightconnect Compression Plugin

Referências · 2

• https://extensions.rapid7.com/extension/compression · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-8662 · Nota de Segurança