# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection](https://agentprime.io/advisories/CVE-2026-88275.md)
  `CVE-2026-88275` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [GV-LPC2011/LPC2211 - Wireless SSID Command Injection](https://agentprime.io/advisories/CVE-2026-88274.md)
  `CVE-2026-88274` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection](https://agentprime.io/advisories/CVE-2026-88273.md)
  `CVE-2026-88273` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection](https://agentprime.io/advisories/CVE-2026-88272.md)
  `CVE-2026-88272` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [Checkov by Prisma Cloud: OS Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-0302.md)
  `CVE-2026-0302` · CVE record: Palo Alto Networks Checkov by Prisma Cloud · CVSS 1.1 Low · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [Cortex XDR Broker VM: Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-0304.md)
  `CVE-2026-0304` · CVE record: Palo Alto Networks Cortex XDR Broker VM · CVSS 4.8 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration](https://agentprime.io/advisories/CVE-2026-0309.md)
  `CVE-2026-0309` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 4.0 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server](https://agentprime.io/advisories/CVE-2026-87911.md)
  `CVE-2026-87911` · CVE record: AWS AWS Labs postgres MCP Server · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection, CWE-184
- [Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface](https://agentprime.io/advisories/CVE-2026-73787.md)
  `CVE-2026-73787` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Authenticated Remote Code Execution in CPPM Web Interface](https://agentprime.io/advisories/CVE-2026-73769.md)
  `CVE-2026-73769` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [OS command injection in Schneider Electric PowerLogic T300](https://agentprime.io/advisories/CVE-2026-77120.md)
  `CVE-2026-77120` · CVE record: Schneider Electric PowerLogic T300 · CVSS 8.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Argument injection in Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as…](https://agentprime.io/advisories/CVE-2026-8044.md)
  `CVE-2026-8044` · CVE record: Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [OS command injection in Dell PowerScale OneFS](https://agentprime.io/advisories/CVE-2026-70425.md)
  `CVE-2026-70425` · CVE record: Dell PowerScale OneFS · CVSS 6.7 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [OS command injection in Dell iDRAC9 and others](https://agentprime.io/advisories/CVE-2026-23855.md)
  `CVE-2026-23855` · CVE record: Dell iDRAC9 and 1 more · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78484.md)
  `CVE-2026-78484` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79945.md)
  `CVE-2026-79945` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78493.md)
  `CVE-2026-78493` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79741.md)
  `CVE-2026-79741` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [OS command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79689.md)
  `CVE-2026-79689` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79941.md)
  `CVE-2026-79941` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Duplicate Advisory: GitPython 3.1.59: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle](https://agentprime.io/advisories/GHSA-rw58-wc66-99g4.md)
  `GHSA-rw58-wc66-99g4`, `CVE-2026-87818` · PyPI `gitpython`: affected `>=3.1.59`, no fixed version yet · CVSS 7.1 High · Withdrawn · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [OS command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79641.md)
  `CVE-2026-79641` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination](https://agentprime.io/advisories/CVE-2026-87794.md)
  `CVE-2026-87794` · CVE record: nfriedly bestzip · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Tanium addressed an unauthorized code execution vulnerability in Enforce.](https://agentprime.io/advisories/CVE-2026-87088.md)
  `CVE-2026-87088` · CVE record: Tanium Enforce · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Composer arbitrary command execution via a malicious package's Perforce source URL](https://agentprime.io/advisories/GHSA-rvx4-ffvw-m9q3.md)
  `GHSA-rvx4-ffvw-m9q3`, `BIT-composer-2026-84361`, `CVE-2026-84361`, `PKSA-ym19-cy3j-z6df` · Packagist `composer/composer`: affected `>=1.0, <2.2.30 || >=2.3.0, <2.10.3`, fixed in `2.2.30`, `2.10.3` · CVSS 7.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing](https://agentprime.io/advisories/CVE-2026-78630.md)
  `CVE-2026-78630` · CVE record: Okta Okta Access Gateway · CVSS 6.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument](https://agentprime.io/advisories/CVE-2026-78635.md)
  `CVE-2026-78635` · CVE record: Okta Okta Privileged Access Client · CVSS 5.0 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)](https://agentprime.io/advisories/GHSA-3wxw-xv34-2frg.md)
  `GHSA-3wxw-xv34-2frg`, `CVE-2026-78679`, `PYSEC-2026-3837` · PyPI `gitpython`: affected `<3.1.59`, fixed in `3.1.59` · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal, Command injection, Information disclosure
- [Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)](https://agentprime.io/advisories/CVE-2026-82004.md)
  `CVE-2026-82004` · CVE record: Adobe Adobe Campaign Classic · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()](https://agentprime.io/advisories/GHSA-5xxx-qhh7-9287.md)
  `GHSA-5xxx-qhh7-9287`, `CVE-2026-78678`, `PYSEC-2026-3788` · PyPI `gitpython`: affected `<3.1.59`, fixed in `3.1.59` · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection, Information disclosure
- [GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE](https://agentprime.io/advisories/GHSA-284h-m62q-gf8w.md)
  `GHSA-284h-m62q-gf8w`, `CVE-2026-78676`, `PYSEC-2026-3786` · PyPI `gitpython`: affected `<3.1.59`, fixed in `3.1.59` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection, Code injection
- [Semaphore U: OS Command Injection](https://agentprime.io/advisories/GHSA-xp7j-h7jc-4w8p.md)
  `GHSA-xp7j-h7jc-4w8p`, `CVE-2026-73294`, `CVE-2026-73682`, `GO-2026-6435` · Go `github.com/semaphoreui/semaphore`: affected `<0.0.0-20260704181911-7e8a9434bd81`, fixed in `0.0.0-20260704181911-7e8a9434bd81` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Microsoft Azure CLI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83948.md)
  `CVE-2026-83948` · CVE record: Microsoft Microsoft Azure CLI · CVSS 8.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-81380.md)
  `CVE-2026-81380` · CVE record: Microsoft Visual Studio Code · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Azure HDInsight Ambari Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-81349.md)
  `CVE-2026-81349` · CVE record: Microsoft Azure HDInsight · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69534.md)
  `CVE-2026-69534` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Command injection in Fortinet FortiSandbox](https://agentprime.io/advisories/CVE-2026-84387.md)
  `CVE-2026-84387` · CVE record: Fortinet FortiSandbox · CVSS 6.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore](https://agentprime.io/advisories/CVE-2026-86733.md)
  `CVE-2026-86733` · CVE record: grokability snipe-it · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Netis NX10 OS Command Injection via Ping Diagnostic Handler](https://agentprime.io/advisories/CVE-2026-61517.md)
  `CVE-2026-61517` · CVE record: Netis Systems NX10 · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Command Argument Injection Vulnerability in Cosminexus Component Container](https://agentprime.io/advisories/CVE-2026-71377.md)
  `CVE-2026-71377` · CVE record: Hitachi Cosminexus Component Container · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [OS Command Injection Vulnerability in Cosminexus Component Container](https://agentprime.io/advisories/CVE-2026-71376.md)
  `CVE-2026-71376` · CVE record: Hitachi Cosminexus Component Container · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)](https://agentprime.io/advisories/CVE-2026-76561.md)
  `CVE-2026-76561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Duplicate Advisory: knowns vulnerable to command injection](https://agentprime.io/advisories/GHSA-6ph4-r249-58p2.md)
  `GHSA-6ph4-r249-58p2` · npm `knowns`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 7.8 High · Withdrawn · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [OS command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80127.md)
  `CVE-2026-80127` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.2 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [OS command injection in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78488.md)
  `CVE-2026-78488` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor](https://agentprime.io/advisories/CVE-2026-19843.md)
  `CVE-2026-19843` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 8.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [LibreNMS before 26.8.0 Argument Injection via graph_title](https://agentprime.io/advisories/CVE-2026-86427.md)
  `CVE-2026-86427` · CVE record: librenms librenms · CVSS 8.7 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [OS command injection in Dell Secure Connect Gateway (SCG) 5.0 Application and others](https://agentprime.io/advisories/CVE-2026-61409.md)
  `CVE-2026-61409` · CVE record: Dell Secure Connect Gateway (SCG) 5.0 Application and 1 more · CVSS 7.3 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection](https://agentprime.io/advisories/CVE-2026-86299.md)
  `CVE-2026-86299` · CVE record: Linksys RE7000 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection](https://agentprime.io/advisories/CVE-2026-86295.md)
  `CVE-2026-86295` · CVE record: D-Link DIR-895L · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, Command injection
- [OS command injection in OpenVPN](https://agentprime.io/advisories/CVE-2026-84256.md)
  `CVE-2026-84256` · CVE record: OpenVPN OpenVPN · CVSS 7.7 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection](https://agentprime.io/advisories/CVE-2026-79698.md)
  `CVE-2026-79698` · CVE record: Advantech WISE-6610-NB and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, Command injection
- [Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection](https://agentprime.io/advisories/CVE-2026-79697.md)
  `CVE-2026-79697` · CVE record: Advantech WISE-6610-NB and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, Command injection
- [Tenda HG10 Boa formgponConf os command injection](https://agentprime.io/advisories/CVE-2026-86167.md)
  `CVE-2026-86167` · CVE record: Tenda HG10 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Sept 2026 · Tags: Command injection
- [Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection](https://agentprime.io/advisories/CVE-2026-86152.md)
  `CVE-2026-86152` · CVE record: Tenda CP3 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Sept 2026 · Tags: Command injection
- [Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection](https://agentprime.io/advisories/CVE-2026-86151.md)
  `CVE-2026-86151` · CVE record: Tenda CP3 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Command injection
- [Tenda CP3 NetCheckPing.cpp os command injection](https://agentprime.io/advisories/CVE-2026-86149.md)
  `CVE-2026-86149` · CVE record: Tenda CP3 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Command injection
- [Tenda CP3 Kylin system.c SystemAsh os command injection](https://agentprime.io/advisories/CVE-2026-86148.md)
  `CVE-2026-86148` · CVE record: Tenda CP3 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Command injection
- [SSH session privilege manipulation via a crafted username in Mikrotik RouterOS](https://agentprime.io/advisories/CVE-2026-86060.md)
  `CVE-2026-86060` · CVE record: Mikrotik RouterOS · CVSS 9.2 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 5 Sept 2026 · Tags: Command injection
- [OS command injection in SonicWall Network Security Manager (NSM)](https://agentprime.io/advisories/CVE-2026-78327.md)
  `CVE-2026-78327` · CVE record: SonicWall Network Security Manager (NSM) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA5LTA0VDE4OjE0OjU0LjY0MTAwMFoiLCJDVkUtMjAyNi03ODMyNyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA5LTEwVDA4OjIxOjI4LjAwNzAwMFoiLCJDVkUtMjAyNi04ODI3NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA5LTEwVDA4OjIxOjI4LjAwNzAwMFoiLCJDVkUtMjAyNi04ODI3NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.