# Command injection. Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Kiloview E3 NDI Encoder OS Command Injection](https://agentprime.io/advisories/CVE-2026-110243.md) `CVE-2026-110243` · CVE record: Kiloview E3 Firmware · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Kiloview E3 NDI Encoder OS Command Injection](https://agentprime.io/advisories/CVE-2026-107861.md) `CVE-2026-107861` · CVE record: Kiloview E3 Firmware · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Kiloview E3 NDI Encoder OS Command Injection](https://agentprime.io/advisories/CVE-2026-109122.md) `CVE-2026-109122` · CVE record: Kiloview E3 Firmware · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Azure Pipelines Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-105014.md) `CVE-2026-105014` · CVE record: Microsoft Azure Pipelines · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options](https://agentprime.io/advisories/CVE-2026-115372.md) `CVE-2026-115372` · CVE record: lxc incus · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface](https://agentprime.io/advisories/CVE-2026-95715.md) `CVE-2026-95715` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 6.8 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Command Injection Vulnerabilities in AOS-10](https://agentprime.io/advisories/CVE-2026-95709.md) `CVE-2026-95709` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10](https://agentprime.io/advisories/CVE-2026-95708.md) `CVE-2026-95708` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Command Injection Vulnerabilities in AOS-8](https://agentprime.io/advisories/CVE-2026-95706.md) `CVE-2026-95706` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Command Injection Vulnerabilities in AOS-8](https://agentprime.io/advisories/CVE-2026-95705.md) `CVE-2026-95705` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Improper Sanitization leads to Command Injection in AOS-8 Web Interface](https://agentprime.io/advisories/CVE-2026-79956.md) `CVE-2026-79956` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-79890.md) `CVE-2026-79890` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10](https://agentprime.io/advisories/CVE-2026-79882.md) `CVE-2026-79882` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.3 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-79878.md) `CVE-2026-79878` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Adjacent Command Injection Vulnerability in AOS-10](https://agentprime.io/advisories/CVE-2026-79864.md) `CVE-2026-79864` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10](https://agentprime.io/advisories/CVE-2026-79861.md) `CVE-2026-79861` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol](https://agentprime.io/advisories/CVE-2026-79857.md) `CVE-2026-79857` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Command Injection Vulnerabilities in AOS-8](https://agentprime.io/advisories/CVE-2026-79846.md) `CVE-2026-79846` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [OS command injection in the Terraform hook in AWS SAM CLI](https://agentprime.io/advisories/CVE-2026-115414.md) `CVE-2026-115414` · CVE record: AWS aws-sam-cli · CVSS 8.4 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177](https://agentprime.io/advisories/CVE-2026-96376.md) `CVE-2026-96376` · CVE record: Drupal Cloud · CVSS 6.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [TOTOLINK A950RG product.so UploadCustomModule command injection](https://agentprime.io/advisories/CVE-2026-114575.md) `CVE-2026-114575` · CVE record: TOTOLINK A950RG · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection, Command injection - [virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax](https://agentprime.io/advisories/GHSA-c978-59m8-c77v.md) `GHSA-c978-59m8-c77v`, `BIT-virtualenv-2026-113722`, `CVE-2026-113722` · PyPI `virtualenv`: affected `<21.14.9`, fixed in `21.14.9` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection - [Pillow: Argument Injection in Ghostscript call, potentially leading into RCE](https://agentprime.io/advisories/GHSA-w889-685w-c8fh.md) `GHSA-w889-685w-c8fh`, `BIT-pillow-2026-112900`, `CVE-2026-112900` · PyPI `pillow`: affected `>=2.6.0, <13.0.0`, fixed in `13.0.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection - [Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration](https://agentprime.io/advisories/CVE-2026-111813.md) `CVE-2026-111813` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection - [virtualenv bash activate runs commands from an environment name with a backslash before $](https://agentprime.io/advisories/GHSA-vxj4-q4g9-crj7.md) `GHSA-vxj4-q4g9-crj7`, `BIT-virtualenv-2026-113725`, `CVE-2026-113725` · PyPI `virtualenv`: affected `<21.14.7`, fixed in `21.14.7` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, CWE-116 - [virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST](https://agentprime.io/advisories/GHSA-5vjq-rrrf-7h2q.md) `GHSA-5vjq-rrrf-7h2q`, `BIT-virtualenv-2026-113726`, `CVE-2026-113726` · PyPI `virtualenv`: affected `<21.14.4`, fixed in `21.14.4` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, CWE-116 - [virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote](https://agentprime.io/advisories/GHSA-c947-3pg5-gm8q.md) `GHSA-c947-3pg5-gm8q`, `BIT-virtualenv-2026-113732`, `CVE-2026-113732` · PyPI `virtualenv`: affected `<21.14.2`, fixed in `21.14.2` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, CWE-116 - [virtualenv activation scripts run code from a path that contains a placeholder name](https://agentprime.io/advisories/GHSA-8rjx-v5ww-45pp.md) `GHSA-8rjx-v5ww-45pp`, `BIT-virtualenv-2026-113776`, `CVE-2026-113776` · PyPI `virtualenv`: affected `>=20.26.6, <21.14.2`, fixed in `21.14.2` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, Code injection - [Lagoon core ssh service vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-113788.md) `CVE-2026-113788` · CVE record: uselagoon lagoon · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection - [OnePlus OxygenOS improper neutralization of special elements vulnerability](https://agentprime.io/advisories/CVE-2026-70386.md) `CVE-2026-70386` · CVE record: OnePlus OxygenOS · CVSS 8.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, Broken access control - [OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox](https://agentprime.io/advisories/CVE-2026-105044.md) `CVE-2026-105044` · CVE record: Qingteng Host Adaptive Security Platform · CVSS 8.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-35499.md) `CVE-2026-35499` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-40627.md) `CVE-2026-40627` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-33568.md) `CVE-2026-33568` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-9814.md) `CVE-2026-9814` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-10131.md) `CVE-2026-10131` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-10135.md) `CVE-2026-10135` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [OS command injection in Totolink](https://agentprime.io/advisories/CVE-2026-10138.md) `CVE-2026-10138` · CVE record: totolink Totolink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors](https://agentprime.io/advisories/GHSA-r825-w8mm-5pxw.md) `GHSA-r825-w8mm-5pxw`, `CVE-2026-112944` · npm `launch-editor` and 2 more: affected `<2.14.2`, fixed in `2.14.2` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [launch-editor: \`fs.existsSync()\` existence check can be bypassed on Windows](https://agentprime.io/advisories/GHSA-587h-7wmj-h5pm.md) `GHSA-587h-7wmj-h5pm`, `CVE-2026-112942` · npm `launch-editor` and 2 more: affected `<2.14.2`, fixed in `2.14.2` · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [launch-editor: escapeCmdArgs() omits % escaping on Windows](https://agentprime.io/advisories/GHSA-698v-4r3x-3vcv.md) `GHSA-698v-4r3x-3vcv`, `CVE-2026-112943` · npm `launch-editor` and 2 more: affected `<2.14.2`, fixed in `2.14.2` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [Argo CD: A Kustomize remote ref can run commands in the repo-server](https://agentprime.io/advisories/CVE-2026-113708.md) `CVE-2026-113708` · CVE record: argoproj argo-cd · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler](https://agentprime.io/advisories/CVE-2026-113802.md) `CVE-2026-113802` · CVE record: Wavlink WL-WN530BE1-A · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [aaPanel File Manager common.py ExecShell os command injection](https://agentprime.io/advisories/CVE-2026-113506.md) `CVE-2026-113506` · CVE record: aaPanel · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [Apache CouchDB: Admin credentials leading to code execution as operating system user](https://agentprime.io/advisories/CVE-2026-86471.md) `CVE-2026-86471` · CVE record: Apache Software Foundation Apache CouchDB · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection](https://agentprime.io/advisories/CVE-2026-113397.md) `CVE-2026-113397` · CVE record: DrayTek Vigor2960 · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection](https://agentprime.io/advisories/CVE-2026-113396.md) `CVE-2026-113396` · CVE record: DrayTek Vigor2960 · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection](https://agentprime.io/advisories/CVE-2026-113391.md) `CVE-2026-113391` · CVE record: DrayTek Vigor2960 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection](https://agentprime.io/advisories/CVE-2026-113390.md) `CVE-2026-113390` · CVE record: DrayTek Vigor2960 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection](https://agentprime.io/advisories/CVE-2026-113389.md) `CVE-2026-113389` · CVE record: DrayTek Vigor2960 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection](https://agentprime.io/advisories/CVE-2026-113378.md) `CVE-2026-113378` · CVE record: mcollina mcp-ripgrep · CVSS 4.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [Command injection in Advantech ADAM-3600](https://agentprime.io/advisories/CVE-2026-43850.md) `CVE-2026-43850` · CVE record: Advantech ADAM-3600 · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [Command injection in Advantech ADAM-3600](https://agentprime.io/advisories/CVE-2026-43836.md) `CVE-2026-43836` · CVE record: Advantech ADAM-3600 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Command injection - [H3C Magic NX15 usrlist sub_416874 os command injection](https://agentprime.io/advisories/CVE-2026-112370.md) `CVE-2026-112370` · CVE record: H3C Magic NX15 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection - [orbitale imagemagick-php Command.php font os command injection](https://agentprime.io/advisories/CVE-2026-112301.md) `CVE-2026-112301` · CVE record: orbitale imagemagick-php · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection - [FusionPBX Dialplan Editor dialplan.php os command injection](https://agentprime.io/advisories/CVE-2026-112195.md) `CVE-2026-112195` · CVE record: FusionPBX · CVSS 5.1 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection - [JumpServer Template Rendering os command injection](https://agentprime.io/advisories/CVE-2026-112159.md) `CVE-2026-112159` · CVE record: JumpServer · CVSS 5.1 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection - [PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host](https://agentprime.io/advisories/CVE-2026-103038.md) `CVE-2026-103038` · CVE record: StreamSoft PingTools Network Utilities · CVSS 8.6 High · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection - [Camunda Expression Injection via orQueries RCE](https://agentprime.io/advisories/CVE-2026-109432.md) `CVE-2026-109432` · CVE record: Camunda Camunda 7 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection, Code injection - [BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys](https://agentprime.io/advisories/CVE-2026-112264.md) `CVE-2026-112264` · CVE record: bentoml BentoML · CVSS 8.5 High · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .