CVE-2026-8659 – OS Command Injection in Rapid7 InsightConnect SQLmap Plugin

CVE ID :CVE-2026-8659

Published : June 25, 2026, 12:07 a.m. | 1 hour, 37 minutes ago

Description :OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.

Severity: 6.0 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…