Rapid7 InsightConnect Ping Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Rapid7 InsightConnect Ping Plugin: 1 record(s), with affected versions and fixes.
CVE-2026-8660
Critical · 9.8
CWE-78 Jun 24, 2026
Rapid7 InsightConnect Ping Plugin OS Command Injection (CVE-2026-8660)
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.