Medium severity6.0NVD Advisory· Published Jun 25, 2026· Updated Jun 29, 2026
CVE-2026-8659
CVE-2026-8659
Description
OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.
Affected products
2- cpe:2.3:a:rapid7:insightconnect_sqlmap:*:*:*:*:*:rapid7:*:*Range: <2.0.1
Patches
Vulnerability mechanics
References
1- extensions.rapid7.com/extension/sqlmapnvdProduct
News mentions
0No linked articles in our index yet.