CVE-2026-8660: OS Command Injection in Rapid7 InsightConnect Ping Plugin
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8660?
CVE-2026-8660 has a severity rating of high with a score of 7.7.
How do I fix CVE-2026-8660?
To fix CVE-2026-8660, ensure that the Rapid7 InsightConnect Ping Plugin is updated to the latest version that addresses the OS Command Injection vulnerability.
What are the risks associated with CVE-2026-8660?
CVE-2026-8660 allows remote attackers to execute arbitrary OS commands, posing significant risks to system integrity and confidentiality.
Which software is affected by CVE-2026-8660?
CVE-2026-8660 affects the Rapid7 InsightConnect Ping Plugin on Linux.
What type of vulnerability is CVE-2026-8660?
CVE-2026-8660 is classified as an OS Command Injection vulnerability due to insufficient input validation.