CVE-2026-8660

CVE-2026-8660 describes an OS Command Injection in the Linux ping action of Rapid7 InsightConnect Ping Plugin. The root cause is insufficient input validation when constructing shell commands for the host parameter, enabling remote command execution with existing user interaction not required. Do...