Insightconnect Traceroute vulnerabilities

1 known vulnerability in Insightconnect Traceroute from Rapid7. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  InsightConnect Traceroute Plugin: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-8666Jun 25, 2026Rapid7EPSS 1.2%

  OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient inpu