Cisco Firepower Management Center 2.1.7 Release

[staleb-r7]

🎫 Ticket

Resolve CVE-2026-69247 in rapid7/insightconnect-plugins

🧩 Type of Change

• Bug fix

🧠 Background & Motivation

A security scan flagged CVE-2026-69247 (Timing Attack) in cryptography==49.0.0 in plugins/cisco_firepower_management_center/requirements.txt. A fix is available; bumping to the latest release clears it.

✨ What Changed

• cryptography bumped 49.0.0 → 50.0.0
• Plugin version bumped 2.1.6 → 2.1.7

CVE	Title	Fixed In
CVE-2026-69247	Timing Attack	cryptography 50.0.0

🧪 Testing

• 44 unit tests passed on SDK-matched Python 3.13.13
• insight-plugin refresh regenerated cleanly
• Container smoke test: image built and started cleanly in HTTP mode (gunicorn Listening/Booting worker, no traceback)
• Staging integration tests (run on branch push)

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.