CVE search · CVE-2026-9155
CVE-2026-9155
high 8.8
OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- cve@rapid7.com
- Weakness
- CWE-78
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
cve@rapid7.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- gnu · sed
References
- https://extensions.rapid7.com/extension/sedVendor Advisory