Advisories · Weakness
Command injection.
Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
Edimax BR-6478AC POST Request formiNICbasic command injection
- Edimax BR-6478AC
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6478AC POST Request formAccept command injection
- Edimax BR-6478AC
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD stainfo command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 5.3 Medium
DTStack Taier REST API Runtime.exec os command injection
- DTStack Taier
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn Content-Type formWlanMP os command injection
- Edimax EW-7438RPn
- Command injection
- CVSS 5.1 Medium
Edimax BR-6675nD POST Request mp command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 8.5 High
OS command injection in NEC Platforms, Ltd. Aterm MR51FN and others
- NEC Platforms, Ltd. Aterm MR51FN
- NEC Platforms, Ltd. Aterm CM51FD
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formWlanMP command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formUSBStorage command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection
- Totolink A8000RU
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formWpsStart command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formHwSet command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 6.9 Medium
NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection
- NousResearch hermes-agent
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn POST Request formEZCHNwlanSetu formEZCHNwlanSetup command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn Setting formConnectionSetting command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn POST Request formAccep formAccept command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn POST Request formHwSet command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn webs formWizSurvey os command injection
- Edimax EW-7438RPn
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn webs formWpsStart os command injection
- Edimax EW-7438RPn
- Command injection
- CVSS 5.3 Medium
Edimax BR-6428NS POST Request formWlbasic command injection
- Edimax BR-6428NS
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6428NS POST Request formWlanM system command injection
- Edimax BR-6428NS
- Other injection
- Command injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron
- Command injection
- Privilege escalation
>=1.4.0, <1.14.15-0.20260517022419-d7526351cf97 · fixed in 1.14.15-0.20260517022419-d7526351cf97
GHSA-99gv-2m7h-3hh9 · CVE-2026-46716 - CVSS 9.3 CriticalCritical · CVSS 9+
Microsoft Copilot Tampering Vulnerability
- Microsoft 365 Copilot for iOS
- Command injection
- CVSS 6.5 Medium
M365 Copilot Information Disclosure Vulnerability
- Microsoft 365 Copilot
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Microsoft Power Pages Remote Code Execution Vulnerability
- Microsoft Power Pages
- Command injection
- CVSS 7.5 High
Snappy: Binary path is never shell-escaped due to an inverted is_executable check
- Command injection
<1.7.1 · fixed in 1.7.1
GHSA-vpr4-p6fq-85jc · CVE-2026-46643 - CVSS 6.9 Medium
Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables
- Command injection
- Privilege escalation
<1.23.0 · fixed in 1.23.0
GHSA-7pjr-qpvh-m339 · CVE-2026-46618 - CVSS 8.6 High
IINA < 1.4.3 Command Execution via iina://open URL Scheme
- iina
- Command injection
- CVSS 8.4 High
Remote Code Execution
- Zohocorp ManageEngine ADSelfService Plus
- Zohocorp ManageEngine DataSecurity Plus
- Command injection
- CVSS 7.5 High
Remote code execution via installer Wi-Fi access point scans
- FreeBSD
- Command injection
- CVSS 6.8 Medium
Insufficient Validation of Names During AXFR
- PowerDNS Authoritative
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper sanitization
- Honeywell International Inc. Control Network Module (CNM)
- Command injection
- CVSS 6.7 Medium
Shell injection via volume path
- Netatalk
- Command injection
- CVSS 2.5 Low
system() after failed chdir()
- Netatalk
- Command injection
- CVSS 7.5 High
Bitwise OR logic bug enables shell injection
- Netatalk
- Command injection
- CVSS 8.5 High
HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
- HP Inc HP Linux Imaging and Printing Software
- Command injection
- CVSS 6.3 Medium
Cisco ThousandEyes BrowserBot Command Injection Vulnerability
- Cisco ThousandEyes Enterprise Agent
- Command injection
- CVSS 6.4 Medium
Command injection in Dell SmartFabric Storage Software
- Dell SmartFabric Storage Software
- Command injection
- CVSS 6.8 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
CtrlPanel: Unauthenticated RCE using installer script
- panel
- Command injection
- Broken access control
- CVSS 4.0, no score published
Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`
- Command injection
<2.3.8 · fixed in 2.3.8
GHSA-m9p2-fxp5-v3fp - CVSS 10.0 CriticalCritical · CVSS 9+
9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
- Command injection
- Authentication bypass
>=0.4.30, <0.4.37 · fixed in 0.4.37
GHSA-fhh6-4qxv-rpqj · CVE-2026-46339 - CVSS 9.8 CriticalCritical · CVSS 9+
Kopia: RCE via SSH ProxyCommand Injection
- Command injection
- Authentication bypass
<0.23.0 · fixed in 0.23.0
GHSA-2q4c-3mrw-63c3 · CVE-2026-45695 - CVSS 8.7 High
Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR
- ScadaBR
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter.
- Command injection
- CVSS 8.8 High
A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7.
- Command injection