Approved changes feed: RSS · Atom

cpe:2.3:a:rapid7:insightconnect_ping_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRapid7 (d570a41c-9d2a-5057-8a47-227f116734f8)
ProductInsightconnect Ping Plugin (b57eba1d-f4b6-5413-b2aa-8cd03b0ddcdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8660 vulnerable 2026-07-29 01:09:06.110593 OS Command Injection in Rapid7 InsightConnect Ping Plugin
HIGH (7.7)
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.
Published: 2026-06-25T00:52:34.341Z
Updated: 2026-06-25T12:16:20.003Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.