# Command injection. Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [MariaDB server has unsafe parameter handling in \`wsrep_notify_cmd\`](https://agentprime.io/advisories/CVE-2026-49261.md) `CVE-2026-49261` · CVE record: MariaDB server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2026 · Tags: Command injection - [PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI](https://agentprime.io/advisories/CVE-2026-0273.md) `CVE-2026-0273` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [Dracut: dracut: root code execution via dhcp options command injection](https://agentprime.io/advisories/CVE-2026-6893.md) `CVE-2026-6893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen](https://agentprime.io/advisories/CVE-2026-46529.md) `CVE-2026-46529` · CVE record: mate-desktop atril · CVSS 8.4 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection, CWE-829 - [Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers](https://agentprime.io/advisories/CVE-2026-9151.md) `CVE-2026-9151` · CVE record: TP-Link Systems Inc. Archer AX12 V1 and 3 more · CVSS 8.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [Potential local privileges escalation through argument injection in the nxchmod.sh script](https://agentprime.io/advisories/CVE-2026-53694.md) `CVE-2026-53694` · CVE record: NoMachine NoMachine · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [Roxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /config/versions/.../save)](https://agentprime.io/advisories/CVE-2026-45564.md) `CVE-2026-45564` · CVE record: roxy-wi roxy-wi · CVSS 8.8 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via \`option\` field config injection in section save](https://agentprime.io/advisories/CVE-2026-45558.md) `CVE-2026-45558` · CVE record: roxy-wi roxy-wi · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection, Code injection, CWE-20 - [Roxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save \`config_file_name\`](https://agentprime.io/advisories/CVE-2026-45556.md) `CVE-2026-45556` · CVE record: roxy-wi roxy-wi · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2026 · Tags: Path traversal, Command injection, CWE-20 - [Ghidra < 12.1- Command Injection via URL Annotation Click](https://agentprime.io/advisories/CVE-2026-52750.md) `CVE-2026-52750` · CVE record: nationalsecurityagency ghidra · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-24719.md) `CVE-2026-24719` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2026-22893.md) `CVE-2026-22893` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66279.md) `CVE-2025-66279` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2025-66273.md) `CVE-2025-66273` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter](https://agentprime.io/advisories/GHSA-jvc5-6g7q-c843.md) `GHSA-jvc5-6g7q-c843`, `CVE-2026-48030`, `PKSA-5cjp-hkk1-6kzk` · Packagist `pheditor/pheditor`: affected `>=2.0.1, <2.0.4`, fixed in `2.0.4` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [Net::IMAP: Command Injection via ID command argument](https://agentprime.io/advisories/GHSA-46q3-7gv7-qmgg.md) `GHSA-46q3-7gv7-qmgg`, `CVE-2026-47242` · RubyGems `net-imap`: affected `<0.5.15 || >=0.6.0, <0.6.4.1`, fixed in `0.5.15`, `0.6.4.1` · CVSS 5.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection, Other injection - [Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument](https://agentprime.io/advisories/GHSA-8p34-64r3-mwg8.md) `GHSA-8p34-64r3-mwg8`, `CVE-2026-47240` · RubyGems `net-imap`: affected `<0.5.15 || >=0.6.0, <0.6.4.1`, fixed in `0.5.15`, `0.6.4.1` · CVSS 5.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection, Other injection - [Hermes WebUI < 0.51.311 RCE via Git Configuration Injection](https://agentprime.io/advisories/CVE-2026-49959.md) `CVE-2026-49959` · CVE record: nesquena hermes-webui · CVSS 8.7 High · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [OS command injection in Ivanti Endpoint Manager Mobile](https://agentprime.io/advisories/CVE-2026-10727.md) `CVE-2026-10727` · CVE record: Ivanti Endpoint Manager Mobile · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [OS command injection in Fortinet FortiSandbox and others](https://agentprime.io/advisories/CVE-2026-25089.md) `CVE-2026-25089` · CVE record: Fortinet FortiSandbox and 2 more · CVSS 9.1 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.76 · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [shell-quote quote() does not escape newlines in object .op values](https://agentprime.io/advisories/GHSA-w7jw-789q-3m8p.md) `GHSA-w7jw-789q-3m8p`, `CVE-2026-9277` · npm `shell-quote`: affected `>=1.1.0, <1.8.4`, fixed in `1.8.4` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [OS command injection in ivanti Sentry](https://agentprime.io/advisories/CVE-2026-10520.md) `CVE-2026-10520` · CVE record: ivanti Sentry · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [Shell command injection in Logseq](https://agentprime.io/advisories/CVE-2026-9279.md) `CVE-2026-9279` · CVE record: logseq logseq · CVSS 8.7 High · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [OS command injection in Siemens SINEC INS](https://agentprime.io/advisories/CVE-2026-46746.md) `CVE-2026-46746` · CVE record: Siemens SINEC INS · CVSS 8.7 High · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [degit has a Command Injection issue](https://agentprime.io/advisories/GHSA-77c7-pq4r-6mcq.md) `GHSA-77c7-pq4r-6mcq`, `CVE-2026-11572` · npm `degit`: affected `<2.8.6 || >=3.0.0, <3.3.1`, fixed in `2.8.6`, `3.3.1` · CVSS 8.7 High · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.](https://agentprime.io/advisories/CVE-2026-38615.md) `CVE-2026-38615` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Command injection - [Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()](https://agentprime.io/advisories/CVE-2026-40519.md) `CVE-2026-40519` · CVE record: NginxProxyManager nginx-proxy-manager · CVSS 7.7 High · Not analysed yet · Published 8 Jun 2026 · Tags: Command injection - [OS command injection in Devolutions Server](https://agentprime.io/advisories/CVE-2026-10544.md) `CVE-2026-10544` · CVE record: Devolutions Server · CVSS 6.5 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Command injection - [Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection](https://agentprime.io/advisories/CVE-2026-11556.md) `CVE-2026-11556` · CVE record: Tenda F451 · CVSS 8.7 High · Not analysed yet · Published 8 Jun 2026 · Tags: Command injection - [Command Injection in Archer MR600 WireGuard Client Configuration](https://agentprime.io/advisories/CVE-2026-8913.md) `CVE-2026-8913` · CVE record: TP-Link Systems Inc. Archer MR600 v5 and 2 more · CVSS 8.5 High · Not analysed yet · Published 8 Jun 2026 · Tags: Command injection - [OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload](https://agentprime.io/advisories/CVE-2026-25855.md) `CVE-2026-25855` · CVE record: openbullet openbullet2 · CVSS 8.7 High · Not analysed yet · Published 8 Jun 2026 · Tags: Command injection - [Neovim View Branch secure.lua M.read command injection](https://agentprime.io/advisories/CVE-2026-11487.md) `CVE-2026-11487` · CVE record: Neovim · CVSS 4.8 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Other injection, Command injection - [FoundationAgents MetaGPT common.py check_cmd_exists command injection](https://agentprime.io/advisories/CVE-2026-11455.md) `CVE-2026-11455` · CVE record: FoundationAgents MetaGPT · CVSS 2.3 Low · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection](https://agentprime.io/advisories/CVE-2026-11452.md) `CVE-2026-11452` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection](https://agentprime.io/advisories/CVE-2026-11451.md) `CVE-2026-11451` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Path Normalization dlopen command injection](https://agentprime.io/advisories/CVE-2026-11450.md) `CVE-2026-11450` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection](https://agentprime.io/advisories/CVE-2026-11449.md) `CVE-2026-11449` · CVE record: GL.iNet GL-MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection](https://agentprime.io/advisories/CVE-2026-11448.md) `CVE-2026-11448` · CVE record: GL.iNet GL-MT3000 · CVSS 5.1 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection](https://agentprime.io/advisories/CVE-2026-11447.md) `CVE-2026-11447` · CVE record: GL.iNet GL-MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [vertex-app vertex Log Viewer Endpoint LogMod.js os command injection](https://agentprime.io/advisories/CVE-2026-11408.md) `CVE-2026-11408` · CVE record: vertex-app vertex · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Command injection - [GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection](https://agentprime.io/advisories/CVE-2026-11406.md) `CVE-2026-11406` · CVE record: GL.iNet MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Other injection, Command injection - [Arista Edge Threat Management NGFW UI Arbitrary Command Execution](https://agentprime.io/advisories/CVE-2026-25623.md) `CVE-2026-25623` · CVE record: Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) · CVSS 7.0 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection](https://agentprime.io/advisories/CVE-2026-25622.md) `CVE-2026-25622` · CVE record: Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) · CVSS 7.0 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Arista Edge Threat Management NGFW Reports Application Insecure Input Validation](https://agentprime.io/advisories/CVE-2026-25621.md) `CVE-2026-25621` · CVE record: Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) · CVSS 7.0 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection](https://agentprime.io/advisories/CVE-2026-45777.md) `CVE-2026-45777` · CVE record: ubccr xdmod · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection](https://agentprime.io/advisories/CVE-2026-25620.md) `CVE-2026-25620` · CVE record: Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) · CVSS 7.0 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [HAX CMS Vulnerable to Command Injection using Git.php](https://agentprime.io/advisories/CVE-2026-46394.md) `CVE-2026-46394` · CVE record: haxtheweb haxcms-php · CVSS 7.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Authenticated Remote Code Execution via File Overwrite](https://agentprime.io/advisories/CVE-2026-46399.md) `CVE-2026-46399` · CVE record: haxtheweb haxcms-nodejs and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Path traversal, Command injection, CWE-15 - [Termix Vulnerable to Arbitrary Command Execution in File Manager](https://agentprime.io/advisories/CVE-2026-45750.md) `CVE-2026-45750` · CVE record: Termix-SSH Termix · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection, Broken access control - [Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection](https://agentprime.io/advisories/CVE-2026-45748.md) `CVE-2026-45748` · CVE record: Termix-SSH Termix · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Termix has an OS Command Injection in File Manager resolvePath endpoint](https://agentprime.io/advisories/CVE-2026-45744.md) `CVE-2026-45744` · CVE record: Termix-SSH Termix · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Markdown Preview Enhanced OS Command Injection in External File and Link Opening](https://agentprime.io/advisories/CVE-2026-49492.md) `CVE-2026-49492` · CVE record: shd101wyy Markdown Preview Enhanced · CVSS 8.6 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection](https://agentprime.io/advisories/CVE-2026-11341.md) `CVE-2026-11341` · CVE record: D-Link DWR-M920 · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [Authenticated Remote Code Execution via loadReader functionName code injection in DbGate](https://agentprime.io/advisories/GHSA-wm5r-5qp3-5vxf.md) `GHSA-wm5r-5qp3-5vxf`, `CVE-2026-47670` · npm `dbgate-api`: affected `<7.1.9`, fixed in `7.1.9` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection](https://agentprime.io/advisories/CVE-2026-11339.md) `CVE-2026-11339` · CVE record: D-Link DWR-M920 · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, Command injection - [MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration](https://agentprime.io/advisories/GHSA-6mx4-4h42-r8vh.md) `GHSA-6mx4-4h42-r8vh`, `CVE-2026-47250` · npm `mcp-server-kubernetes`: affected `<3.7.0`, fixed in `3.7.0` · CVSS 6.1 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution](https://agentprime.io/advisories/GHSA-w8p5-mx5w-cpqj.md) `GHSA-w8p5-mx5w-cpqj`, `CVE-2026-11332`, `PYSEC-2026-3458` · PyPI `ansible-core`: affected `<2.16.19rc1 || >=2.17.0b1, <2.18.18rc1 || >=2.19.0b1, <2.19.11rc1 || >=2.20.0b1, <2.20.7rc1 || >=2.21.0b1, <2.21.1rc1`, fixed in `2.16.19rc1`, `2.18.18rc1`, `2.19.11rc1`, `2.20.7rc1`, `2.21.1rc1` · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API](https://agentprime.io/advisories/CVE-2026-21837.md) `CVE-2026-21837` · CVE record: HCLSoftware Digital Experience · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Command injection - [D-Link DWR-M920 formSmsManage sub_41C8E8 command injection](https://agentprime.io/advisories/CVE-2026-10878.md) `CVE-2026-10878` · CVE record: D-Link DWR-M920 · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, Command injection - [Shibby Tomato Web UI rstats rstats_path os command injection](https://agentprime.io/advisories/CVE-2026-10873.md) `CVE-2026-10873` · CVE record: Shibby Tomato · CVSS 8.6 High · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .