Lucene search
+L

24 matches found

NVD
NVD
•added 2026/06/25 1:16 a.m.•26 views

CVE-2026-9155

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation...

8.8CVSS0.01596EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/25 1:16 a.m.•28 views

CVE-2026-9153

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation...

6.5CVSS0.00453EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/25 1:16 a.m.•26 views

CVE-2026-9154

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter...

7.1CVSS0.00409EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:12 a.m.•11 views

CVE-2026-8665

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction...

7.7CVSS6.3AI score0.01197EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/25 12:33 a.m.•19 views

CVE-2026-9153 Arbitrary File Read in Rapid7 InsightConnect Sed Plugin

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation...

6.5CVSS6AI score0.00453EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/25 12:33 a.m.•20 views

EUVD-2026-39155

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation...

6.5CVSS6AI score0.00453EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 12:33 a.m.•58 views

CVE-2026-9153 Arbitrary File Read in Rapid7 InsightConnect Sed Plugin

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation...

6.5CVSS0.00453EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 12:29 a.m.•13 views

CVE-2026-9154

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter...

7.1CVSS6AI score0.00409EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/25 12:29 a.m.•22 views

EUVD-2026-39154

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter...

7.1CVSS6AI score0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 12:29 a.m.•58 views

CVE-2026-9154 Arbitrary File Write in Rapid7 InsightConnect Sed Plugin

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter...

7.1CVSS0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 12:25 a.m.•57 views

CVE-2026-9155 OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation...

8.8CVSS0.01596EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 12:25 a.m.•11 views

CVE-2026-9155

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation...

8.8CVSS6.2AI score0.01596EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/25 12:25 a.m.•17 views

CVE-2026-9155 OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation...

8.8CVSS6.5AI score0.01596EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/25 12:25 a.m.•46 views

CVE-2026-9155

The CVE-2026-9155 issue affects the Rapid7 InsightConnect Sed Plugin running on Linux. It is a command-injection vulnerability in the expression parameter, caused by insufficient input validation, enabling authenticated attackers to run arbitrary OS commands on the host. The commonly cited score ...

8.8CVSS6.5AI score0.01596EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•3 views

CVE-2026-9153: Improper Limitation of a Pathname to a Restricted Directory

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation...

6.5CVSS5.9AI score0.00453EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•30 views

PT-2026-52159

Name of the Vulnerable Software and Affected Versions Rapid7 InsightConnect Sed Plugin on Linux affected versions not specified Description Insufficient input validation in the Sed Plugin allows authenticated attackers to read arbitrary files. This is achieved by manipulating the expression...

6.5CVSS5.9AI score0.00453EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•1 views

CVE-2026-8592: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in the processstring action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline...

9.8CVSS6.4AI score0.01197EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•5 views

CVE-2026-9154: Improper Limitation of a Pathname to a Restricted Directory

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter...

7.1CVSS6AI score0.00409EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•39 views

PT-2026-52161

Name of the Vulnerable Software and Affected Versions Rapid7 InsightConnect Sed Plugin on Linux affected versions not specified Description An OS Command Injection issue exists in the Sed Plugin on Linux. Authenticated attackers can execute arbitrary operating system commands through the expressi...

8.8CVSS6AI score0.01596EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•7 views

CVE-2026-9155: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation...

8.8CVSS6.3AI score0.01596EPSS
SaveExploits0References3
Rows per page
Query Builder