CVE-2026-8658

Name of the Vulnerable Software and Affected Versions Rapid7 InsightConnect Tcpdump Plugin (affected versions not specified)

Description An OS Command Injection issue exists in the Rapid7 InsightConnect Tcpdump Plugin on Linux. Authenticated attackers can execute arbitrary operating system commands by exploiting insufficient input sanitization during the construction of shell commands. The attack is carried out through the options or filter parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the options and filter parameters in the affected plugin until the issue is resolved.