Rapid7 InsightConnect Sed Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Rapid7 InsightConnect Sed Plugin: 3 record(s), with affected versions and fixes.
CVE-2026-9155
High · 8.8
CWE-78 Jun 24, 2026
OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.
OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.
CVE-2026-9154
Medium · 6.5
CWE-22 Jun 24, 2026
Arbitrary File Write in Rapid7 InsightConnect Sed Plugin
Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.
CVE-2026-9153
Medium · 6.5
CWE-22 Jun 24, 2026
Arbitrary File Read in Rapid7 InsightConnect Sed Plugin
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.