Command injection.

AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution

• ag2
• ag2ai autogen
• Command injection
• CWE-184

Argument injection in OpenAI Codex Desktop for Windows and others

• OpenAI Codex Desktop for Windows
• OpenAI Codex Desktop for Windows (Microsoft Store/MSIX package)
• Command injection

FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands

• signalwire freeswitch
• Command injection
• CWE-749

FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia

• signalwire freeswitch
• Command injection
• Code injection

OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution

• tinyhumansai openhuman
• Command injection
• Broken access control

ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)

• ntopng
• Command injection

agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

• AgentScope
• Command injection

OS command injection in SHIRASAGI

• SHIRASAGI
• Command injection

OS command injection in OPNsense os-acme-client

• OPNsense os-acme-client
• Command injection

Argument injection in iTerm2

• iTerm2
• Command injection

Purocean Yank Note Terminal index.ts checkPermission os command injection

• Purocean Yank Note
• Command injection

Edimax BR-6208AC mp command injection

• Edimax BR-6208AC
• Other injection
• Command injection

radare2: Remote code execution when loading Pebble/SMD binary

• radareorg radare2
• Command injection

tsParticles: Generated release notes can execute shell commands in the stable publish workflow

• tsparticles
• Command injection

nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files

• nvm
• Command injection

nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases

• nvm
• Command injection
• CWE-20

Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

• xerrors Yuxi
• Command injection
• Broken access control

Linksys E5350 apply.cgi system os command injection

• Linksys E5350
• Command injection

Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection

• Linksys WRT54GL
• Command injection

Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection

• Linksys WRT54GL
• Command injection

Command injection vulnerability

• Zohocorp ManageEngine Key Manager Plus
• Command injection

Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injection

• Qihoo 360 D603-2
• Qihoo 360 D600-2
• Command injection

Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection

• Qihoo 360 D603-2
• Qihoo 360 D600-2
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

• Tanium Threat Response
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

• Tanium Threat Response
• Command injection

Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component

• TP-Link Systems Inc. Archer AX3000 v2
• Command injection

Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration

• Red Hat OpenShift GitOps
• Command injection

Authenticated Command Injection Vulnerability in HPE Networking VIA

• Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA)
• Command injection

upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution

• networkupstools nut
• Command injection

Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows

• Securepoint SSL VPN Client v2
• Path traversal
• Command injection

nnn through 5.3 OS Command Injection via togglex Plugin

• jarun nnn
• Command injection

AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()

• AzuraCast
• Command injection

Nagios XI < 2026R2 OS Command Injection via mibs.php

• Nagios Enterprises, LLC Nagios XI
• Command injection

Command injection vulnerability

• Zohocorp ManageEngine Key Manager Plus
• Command injection

Command Injection in IPsec VPN

• Welotec TK100
• Welotec TK500-v2
• Command injection

Command Injection in Digital I/O

• Welotec TK100
• Welotec TK500-v2
• Command injection

Command Injection in WireGuard VPN

• Welotec TK100
• Welotec TK500-v2
• Command injection

Command Injection in ZeroTier VPN

• Welotec TK100
• Welotec TK500-v2
• Command injection

Command Injection in Management Control Functions

• Welotec TK100
• Welotec TK500-v2
• Command injection

An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.

• Path traversal
• Command injection

Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

• Temporal Technologies, Inc. Temporal Server
• Command injection
• Broken access control

Konflux-ci: unquoted variable expansion in shell command execution

• Command injection

Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket

• Nexbox A95X
• Amlogic Android SDK
• Command injection

Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token

• Control Web Panel
• Command injection

Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/

• Control Web Panel
• Command injection

Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API

• Control Web Panel
• Command injection

Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory

• Control Web Panel
• Command injection

Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor

• Control Web Panel
• Path traversal
• Command injection

OS Command Injection in Barracuda Appliances

• Barracuda Networks Barracuda Email Security Gateway (ESG)
• Barracuda Networks Barracuda Load Balancer Application Delivery Controller (ADC)
• Command injection

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

Argument injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

Remote Code Execution

• Zohocorp ManageEngine Eventlog Analyzer
• Zohocorp ManageEngine Log360
• Command injection

Remote Code Execution Vulnerability

• Zohocorp ManageEngine Password Manager Pro
• Zohocorp ManageEngine PAM360
• Command injection

WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection

• WAVLINK WN551X3-A
• Command injection

WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection

• WAVLINK WN551X3-A
• Command injection

WAVLINK WN536AX6-A protocol.csp host_black os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection

• WAVLINK WN536AX6-A
• Command injection