CVE Intelligence

Rapid7 Insightconnect Traceroute vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Rapid7 Insightconnect Traceroute: 1 record(s), with affected versions and fixes.
cpe:2.3:a:rapid7:insightconnect_traceroute

CVE-2026-8666 Critical · 9.8 CWE-78 Jun 24, 2026
Rapid7 InsightConnect Traceroute Plugin OS Command Injection (CVE-2026-8666)
OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.