Command injection.

better-npm-audit OS Command Injection via registry flag

• jeemok better-npm-audit
• Command injection

TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

• TRENDnet TEW-823DRU
• Other injection
• Command injection

TRENDnet TEW-821DAP ssi upload.cgi command injection

• TRENDnet TEW-821DAP
• Other injection
• Command injection

UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

• tclahr uac
• Command injection

UAC < 3.3.0 Command Injection via command_collector.sh

• tclahr uac
• Command injection

UAC < 3.3.0 Command Injection via run_command.sh

• tclahr uac
• Command injection

Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution

• lxc incus
• Command injection

Comfast CF-N1-S mbox-config system command injection

• Comfast CF-N1-S
• Other injection
• Command injection

CVE-2026-47827 – BOSH CLI Powershell Injection

• Cloud Foundry Foundation BOSH CLI
• Command injection

Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials

• Apache Software Foundation Apache InLong
• Command injection

Apache CloudStack: OS Command Injection due to unsanitized mount command

• Apache Software Foundation Apache CloudStack
• Command injection

Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates

• Apache Software Foundation Apache CloudStack
• Command injection
• Server-side request forgery (SSRF)

Apache CloudStack: Get and Run Diagnostics Command Injection

• Apache Software Foundation Apache CloudStack
• Command injection

Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

• Datiphy Inc. Data Management Center
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

• Microsoft Azure Managed Instance for Apache Cassandra
• Command injection

OTRS Community Edition OS Command Injection via PGP Configuration

• Centuran Consulting OTRS Community Edition
• Command injection

Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

• Command injection
• CWE-20

>=4.1.0, <4.1.72 || >=5.0.0, <5.6.2 || >=6.0.0, <6.8.13 || >=7.0.0, <7.0.36 · fixed in 4.1.72, 5.6.2, 6.8.13, 7.0.36

Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

• TP-Link Systems Inc. ER7212PC v2
• TP-Link Systems Inc. ER605 v2
• Command injection

NocoBase backup restore schema name allows command injection

• Command injection

<2.1.19 · fixed in 2.1.19

Tenda CH22 formcreateFileName command injection

• Tenda CH22
• Other injection
• Command injection

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

• Sony XAV-9500ES
• Command injection

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

• Kenwood DNR1007XR
• Command injection

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

• Kenwood DNR1007XR
• Command injection

NoMachine getstat Command Injection Remote Code Execution Vulnerability

• NoMachine
• Command injection

Comfast CF-N1-S mbox-config sprintf command injection

• Comfast CF-N1-S
• Other injection
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts

• Canonical accountsservice
• Command injection

CVE-2026-18482

• Klarso GmbH neo-mjs
• Command injection

n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values

• n8n
• Command injection

n8n before 1.123.69 Arbitrary File Read and Write via Snowflake

• n8n
• Command injection

chenhg5 cc-connect Management API engine.go shellExecCommand os command injection

• chenhg5 cc-connect
• Command injection

TRENDnet TEW-755AP ssi email.cgi log_email_server command injection

• TRENDnet TEW-755AP
• Other injection
• Command injection

SPL Injection through the geostats Command in Splunk Enterprise

• Splunk Enterprise
• Command injection

SPL Injection through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Command injection

SPL Injection through Nearby Event Searches in Splunk Enterprise

• Splunk Enterprise
• Command injection

TRENDnet TV-IP751WIC alphapd set_time.cgi command injection

• TRENDnet TV-IP751WIC
• Other injection
• Command injection

Command Injection in Router Web Management Interface

• TP-Link Systems Inc. Archer C20 v6
• Command injection

Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection

• Termix
• Command injection

Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts

• Termix
• Command injection

TRENDnet TEW-821DAP ssi ping.cgi system command injection

• TRENDnet TEW-821DAP
• Other injection
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Wekan:hell Injection in External Antivirus Scanner Path via asyncExec

• wekan
• Command injection

Duplicate Advisory: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

• Command injection

<=3.1.57 · no fixed version yet

Duplicate Advisory: GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

• Command injection

<=3.1.57 · no fixed version yet

Duplicate Advisory: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

• Command injection

<=3.1.57 · no fixed version yet

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

• libfuse sshfs
• Command injection

OS command injection in Dell RecoverPoint for Virtual Machines

• Dell RecoverPoint for Virtual Machines
• Command injection

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Command injection

Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler

• Shenzhen Cudy Technology Co., Ltd. WR3000 2.0
• Command injection

phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL

• thorsten phpMyFAQ
• Command injection

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection