CVE-2026-8666 – OS Command Injection in Rapid7 InsightConnect Traceroute Plugin

CVE ID :CVE-2026-8666

Published : June 25, 2026, 1:35 a.m. | 2 hours, 8 minutes ago

Description :OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.

Severity: 7.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…