Advisories · Weakness
Command injection.
Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 4.8 Medium
awwaiid mcp-server-taskwarrior vulnerable to command injection
- Other injection
- Command injection
<=1.0.1 · no fixed version yet
GHSA-95hg-3c55-xf9x · CVE-2026-5833 - CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 8.6 High
D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection
- D-Link DIR-882
- Command injection
- CVSS 5.3 Medium
Agions taskflow-ai vulnerable to os command injection in src/mcp/server/handlers.ts
- Command injection
<2.1.9 · fixed in 2.1.9
GHSA-3xp3-pr8x-f755 · CVE-2026-5831 - CVSS 9.8 CriticalCritical · CVSS 9+
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.
- Command injection
- CVSS 8.5 High
UAC < 3.3.0-rc1 Command Injection via Placeholder Substitution
- tclahr UAC
- Command injection
- CVSS 8.4 High
parseusbs < 1.9 Command Injection via Volume Path Argument
- khyrenz parseusbs
- Command injection
- CVSS 8.5 High
parseusbs < 1.9 Command Injection via Crafted LNK Filename
- khyrenz parseusbs
- Command injection
- CVSS 6.9 Medium
idachev mcp-javadc HTTP os command injection
- idachev mcp-javadc
- Command injection
- CVSS 6.3 Medium
Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link
- Shopify tophat
- Command injection
- CVSS 7.8 High
Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit
- Command injection
<4.81.1 · fixed in 4.81.1
GHSA-rphv-h674-5hp2 · CVE-2026-27806 - CVSS 8.5 High
OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53
- TP-Link Systems Inc. AX53 v1.0
- Command injection
- CVSS 8.5 High
OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53
- TP-Link Systems Inc. AX53 v1.0
- Command injection
- CVSS 8.2 High
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold
- coolercontrold
- Command injection
- CVSS 7.2 High
Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
- Command injection
<8.39.0 · fixed in 8.39.0
GHSA-6c37-7w4p-jg9v · CVE-2026-35581 - CVSS 9.1 CriticalCritical · CVSS 9+
Emissary has GitHub Actions Shell Injection via Workflow Inputs
- Command injection
<8.39.0 · fixed in 8.39.0
GHSA-3g6g-gq4r-xjm9 · CVE-2026-35580 - CVSS 4.0, no score published
skilleton has improper input handling in repository/path processing
- Command injection
- Denial of service
<0.3.1 · fixed in 0.3.1
GHSA-5g3j-89fr-r2vp - CVSS 7.5 High
File Browser has a Command Injection via Hook Runner
- Command injection
<2.33.8 · fixed in 2.33.8
GHSA-jvpw-637p-h3pw · CVE-2026-35585 - CVSS 6.9 Medium
suvarchal docker-mcp-server HTTP index.ts pull_image os command injection
- suvarchal docker-mcp-server
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
dbt has a Command Injection in Reusable Workflow via Unsanitized comment-body Output
- dbt-labs dbt-core
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.0 High
An OS Command Injection vulnerability in Nokia MantaRay NM
- Nokia MantaRay NM
- Command injection
- CVSS 8.0 High
An OS Command Injection vulnerability in Nokia MantaRay NM
- Nokia MantaRay NM
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Tianxin Internet Behavior Management System Command Injection via toQuery.php
- Beijing Topsec Network Security Technology Co., Ltd. Tianxin Internet Behavior Management System
- Command injection
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
- Command injection
- Code injection
<5.19.5 || >=6.0.0, <6.2.3 · fixed in 5.19.5, 6.2.3
GHSA-rxpj-7qvf-xv32 · CVE-2026-34197 - CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi setFirewallType os command injection
- Totolink A7100RU
- Command injection
- CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi setNtpCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 7.7 High
AWS Research and Engineering Studio (RES) FileBrowser Command Injection
- AWS Research and Engineering Studio (RES)
- Command injection
- CVSS 8.7 High
Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)
- AWS Research and Engineering Studio (RES)
- Command injection
- CVSS 5.1 Medium
Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection
- Totolink A3300R
- Command injection
- CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection
- Totolink A7100RU
- Command injection
- CVSS 6.9 Medium
Totolink A7100RU cstecgi.cgi CsteSystem os command injection
- Totolink A7100RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Aperi'Solve Affected by Unauthenticated RCE via JPSeek Analyzer Command
- Zeecka AperiSolve
- Command injection
- CVSS 8.2 High
Vim modeline bypass via various options affects Vim < 9.2.0276
- vim
- Command injection
- CVSS 6.9 Medium
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
- OFFIS DCMTK
- Command injection
- CVSS 4.8 Medium
ChrisChinchilla Vale-MCP HTTP index.ts os command injection
- ChrisChinchilla Vale-MCP
- Command injection
- CVSS 4.8 Medium
Braffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection
- Braffolk mcp-summarization-functions
- Command injection
- CVSS 4.8 Medium
@elgentos/magento2-dev-mcp vulnerable to command injection
- Command injection
<=1.0.2 · no fixed version yet
GHSA-xqv9-qr76-hfq2 · CVE-2026-5603 - CVSS 4.8 Medium
@nor2/heim-mcp vulnerable to command injection
- Command injection
<=0.1.3 · no fixed version yet
GHSA-wx4p-jr66-jfp9 · CVE-2026-5602 - CVSS 6.8 Medium
A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.
- Command injection
- CVSS 5.3 Medium
Tenda AC10 httpd formAddMacfilterRule os command injection
- Tenda AC10
- Command injection
- CVSS 5.3 Medium
ScrapeGraphAI scrapegraph-ai GenerateCodeNode generate_code_node.py create_sandbox_and_execute os command injection
- ScrapeGraphAI scrapegraph-ai
- Command injection
- CVSS 5.3 Medium
MoussaabBadla code-screenshot-mcp HTTP os command injection
- MoussaabBadla code-screenshot-mcp
- Command injection
- CVSS 8.8 High
pyLoad: Improper Neutralization of Special Elements used in an OS Command
- Command injection
<=0.5.0b3.dev96 · no fixed version yet
GHSA-w48f-wwwf-f5fr · CVE-2026-35463 - CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step
- Command injection
<3.33.4 · fixed in 3.33.4
GHSA-fcm4-4pj2-m5hf · CVE-2026-35216 - CVSS 9.3 CriticalCritical · CVSS 9+
ProSoft Technology ICX35-HWC Command Injection via Web Interface
- ProSoft Technology ICX35-HWC Cellular Gateway
- Command injection
- CVSS 7.8 High
BentoML: Command Injection in cloud deployment setup script
- Command injection
<1.4.38 · fixed in 1.4.38
GHSA-fgv4-6jr3-jgfw · CVE-2026-35043