Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Rapid7 InsightConnect Sed Plugin — extensions.rapid7.com/extension/sed Clear all filters
TI-2026-08048 CVE-2026-9153 · GHSA-v6m6-hc9j-5r5w

Arbitrary File Read in Rapid7 InsightConnect Sed Plugin

Priority LOW 29

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2026-06-25 Fixed in 2.0.5 CWE-200
TI-2026-08049 CVE-2026-9154 · GHSA-9723-5cpr-v9rm

Arbitrary File Write in Rapid7 InsightConnect Sed Plugin

Priority LOW 31

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00409 Published 2026-06-25 Fixed in 2.0.5 CWE-22
TI-2026-08050 CVE-2026-9155 · GHSA-v3gg-5r82-j6rc

OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

Priority MEDIUM 43

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01596 Published 2026-06-25 Fixed in 2.0.5 CWE-78