CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2026-8664

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 53.9%

CVSS Severity

CVSS v3 Score 6.0

References

https://extensions.rapid7.com/extension/finger

Products affected by CVE-2026-8664

Rapid7 » Insightconnect Finger » Version: 0.1.1

cpe:2.3:a:rapid7:insightconnect_finger:0.1.1
Rapid7 » Insightconnect Finger » Version: 1.0.0

cpe:2.3:a:rapid7:insightconnect_finger:1.0.0
Rapid7 » Insightconnect Finger » Version: 1.0.1

cpe:2.3:a:rapid7:insightconnect_finger:1.0.1
Rapid7 » Insightconnect Finger » Version: 1.0.2

cpe:2.3:a:rapid7:insightconnect_finger:1.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-8664

Products

Pricing

Contact Us