CVE-2026-8663

CVE-2026-8663 describes an OS Command Injection in the Rapid7 InsightConnect RPM Plugin on Linux. The vulnerability arises from insufficient input sanitization in shell command construction, making an authenticated attacker able to execute arbitrary OS commands via the repo, key, or name paramete...

rpm bug fix and enhancement update

An update is available for rpm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The RPM Package Manager RPM is a command-line driven package management system...