CVE-2026-9154
Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.
- Score
- CVSS 3.1 7.1 High
- Status
- Analyzed - cve@rapid7.com
- Published
- 2026-06-25
- Last modified
- 2026-10-25
- Weaknesses
- CWE-22
Affected products
References
- https://extensions.rapid7.com/extension/sed
