CVE-2026-8659

HIGH 8.8CVE-2026-8659 · Published 25/06/2026 · updated 25/10/2026

In short

CVE-2026-8659 is a HIGH (CVSS 8.8) vulnerability affecting insightconnect sqlmap (rapid7).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.3% of all vulnerabilities.
Fix: update to 2.0.1 or later.

Package	Affected versions	Patched versions
insightconnect sqlmap rapid7	`< 2.0.1`	`2.0.1`

Description

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.

References

extensions.rapid7.com/extension/sqlmap · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free