GNU Sed vulnerabilities

4 CVEs affecting GNU Sed, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9155, published 2026-06-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-9155, published 2026-06-25. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input…
CVE-2026-9153, published 2026-06-25. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.
CVE-2026-9154, published 2026-06-25. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression…
CVE-2026-5958, published 2026-04-20. Low severity, CVSS 2.1. EPSS: 0.1% chance of exploitation in the next 30 days. When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. resolves symlink to…