Approved changes feed: RSS · Atom

cpe:2.3:a:rapid7:insightconnect_rpm_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRapid7 (d570a41c-9d2a-5057-8a47-227f116734f8)
ProductInsightconnect Rpm Plugin (aec8ca84-0d91-5762-a27a-3ebe95724a57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8663 vulnerable 2026-07-29 01:09:06.124585 OS Command Injection in Rapid7 InsightConnect RPM Plugin
MEDIUM (6)
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.
Published: 2026-06-24T23:56:50.706Z
Updated: 2026-06-25T12:36:02.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.