CVE-2026-8661— Server-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Rapid7 | InsightConnect Markdown Plugin | < 4.0.0 | affected |
4.0.0 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8661
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Server-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin
Source: NVD (National Vulnerability Database)
Vulnerability Description
Server-Side Cross-Site Scripting and Server-Side Request Forgery vulnerability in the markdown_to_pdf action of Rapid7 InsightConnect Markdown Plugin version 3.1.4 and earlier on Linux allows remote attackers to execute JavaScript server-side and make arbitrary outbound HTTP requests via crafted content embedded in Markdown input. The PDF rendering engine does not restrict script execution or outbound network access.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rapid7 | InsightConnect Markdown Plugin | 0 ~ 4.0.0 | - |
II. Public POCs for CVE-2026-8661
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8661
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-8661 (2)
IV. Related Vulnerabilities
Same vendor: Rapid7
- CVE-2026-8658
OS Command Injection in Rapid7 InsightConnect Tcpdump Plugin - CVE-2026-8662
Path Traversal in Rapid7 InsightConnect Compression Plugin - CVE-2026-8666
OS Command Injection in Rapid7 InsightConnect Traceroute Plu - CVE-2026-8592
OS Command Injection in Rapid7 InsightConnect AWK Plugin - CVE-2026-8664
OS Command Injection in Rapid7 InsightConnect Finger Plugin
Same weakness: CWE-79
- CVE-2026-59102
Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rend - CVE-2026-58579
RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pip - CVE-2025-71385
Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Pa - CVE-2026-8699
Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web M - CVE-2026-4772
Stored XSS in TR7's WAF-ASP
V. Comments for CVE-2026-8661
No comments yet