Advisories · Technology

Rapid7 InsightConnect Markdown Plugin.

Every CVE that names Rapid7 InsightConnect Markdown Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8661 CVE record

CVSS 4.8 Medium

Server-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin
- Rapid7 InsightConnect Markdown Plugin
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
Not analysed yet 26 Jun 2026