7.1Hoch
CVE-2026-9154Arbitrary File Write in Rapid7 InsightConnect Sed Plugin
Beschreibung
Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.
Schwachstellentyp (CWE):
CWE-22
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| gnu | sed | 4.2.2 | |
| Rapid7 | InsightConnect Sed Plugin | < 2.0.5, fixed 2.0.5 |
Referenzen und Patches
- https://extensions.rapid7.com/extension/sed vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:gnu:sed:4.2.2:*:*:*:*:*:*:*