CVE-2026-8660

CVE-2026-8660 describes an OS Command Injection in the Linux ping action of Rapid7 InsightConnect Ping Plugin. The root cause is insufficient input validation when constructing shell commands for the host parameter, enabling remote command execution with existing user interaction not required. Do...

EUVD-2026-39157

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands...