← Database

CVE-2026-8659

MEDIUM CVSS: 6.0 Published: 2026-06-25 Modified: 2026-06-29

Description

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.

Affected Platforms

Linux Linux KernelRapid7 Insightconnect Sqlmap

Weakness Type

CWE-78

References