InsightConnect Finger Plugin vulnerabilities

1 known vulnerability in InsightConnect Finger Plugin from Rapid7. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  InsightConnect Finger Plugin: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-8664Jun 25, 2026Rapid7EPSS 1.29%

  OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.