Command injection.

Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

• alexpasmantier television
• Command injection

HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability

• Hewlett Packard Enterprise HPE Compute Scale-up Server 3200 platform
• Hewlett Packard Enterprise HPE Compute Scale-up Server 3250 platform
• Command injection

GV-ASManager Web Server Command Injection Vulnerability

• GeoVision Inc. GV-ASManager
• Command injection

Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution

• WSO2 Enterprise Integrator
• WSO2 API Manager
• Command injection

alexpasmantier television entry.rs output command injection

• alexpasmantier television
• Other injection
• Command injection

OS command injection in Tektronix 3 Series MDO

• Tektronix 3 Series MDO
• Command injection

Apache Kylin: spark job OS command injection

• Apache Software Foundation Apache Kylin
• Command injection

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

• Command injection
• CWE-20

<0.2.121 · fixed in 0.2.121

ZoneMinder: Authenticated RCE via command injection in monitor Device Path

• zoneminder
• Command injection

ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)

• zoneminder
• Command injection

ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

• zoneminder
• Command injection

SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore

• CodeWithCJ SparkyFitness
• Command injection

Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Command injection

Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings

• 5rahim Seanime
• Command injection

Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action

• opajaap WP Photo Album Plus
• Command injection

OS command injection in Wheels CLI

• Wheels CLI
• Command injection

Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary…

• Command injection
• Information disclosure

mise permits untrusted local configuration to override default shell arguments

• Command injection
• Broken access control

<2026.7.14 · fixed in 2026.7.14

Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php

• Netgate pfSense CE
• Command injection

Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh

• Netgate pfSense CE
• Command injection

Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh

• Netgate pfSense CE
• Command injection

Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters

• Netgate pfSense CE
• Command injection

Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID

• Netgate pfSense CE
• Command injection

Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP

• Netgate pfSense CE
• Command injection

Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface

• Netgate pfSense CE
• Command injection

Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php

• Netgate pfSense CE
• Command injection

CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

• OpenPrinting cups
• Other injection
• Command injection

Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

• Unitronics UniStream Pro/UniLogic
• Command injection

OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

• opnsense core
• Path traversal
• Command injection

Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection

• Wavlink WL-WN530BE2-A
• Command injection

Pre-Authentication Command Injection

• QNAP Systems Inc. HybridDesk Station
• Command injection

**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`

• QNAP Systems Inc. Notes Station 3
• Command injection

WebSocket timelapse path traversal and command injection

• QNAP Systems Inc. QuMagie
• Path traversal
• Command injection

OS command injection in Netgate pfSense-pkg-frr

• Netgate pfSense-pkg-frr
• Command injection

MoviePilot 3.1.5 Command Injection via ExecuteCommandTool

• jxxghp MoviePilot
• Command injection
• CWE-1427

Cortex XSOAR: OS Command Injection Vulnerability

• Palo Alto Networks Cortex XSOAR OS Query
• Palo Alto Networks Cortex XSIAM OS Query
• Command injection

PAN-OS: Authenticated Admin Command Injection Vulnerability

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• Command injection

OS command injection in SonicWall Network Security Manager (NSM)

• SonicWall Network Security Manager (NSM)
• Command injection

WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection

• LabRedesCefetRJ WeGIA
• Command injection
• SQL injection

Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows

• shd101wyy vscode-markdown-preview-enhanced
• Command injection

D-Link DIR-868L HNAP CGI cgibin system os command injection

• D-Link DIR-868L
• Command injection

HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking

• hestiacp
• Command injection
• Code injection

Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Command injection

Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

• Juniper Networks Junos OS Evolved
• Command injection

Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection

• Juniper Networks Junos OS
• Command injection

Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used

• Juniper Networks Junos OS Evolved
• Command injection

Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used

• Juniper Networks Junos OS Evolved
• Command injection

nodejs-whisper allows OS command injection through crafted audio file paths

• Command injection

<0.4.0 · fixed in 0.4.0

git-diff: OS command injection vulnerability via crafted strings to the gitDiff API

• Command injection

<2.0.7 · fixed in 2.0.7

Gitea external renderer argument injection and code execution

• Gitea
• Command injection

Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths

• anshulkharb thumbnail
• Command injection

Stills before 25.24.2 OS Command Injection via Media File Names

• shahkashani stills
• Command injection

@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names

• adamarcanov compress-fonts
• Command injection

Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names

• jinghaihan turnpress
• Command injection

Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()

• beganovich snappdf
• Command injection

Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()

• ArsalanDotMe video-stitch
• Command injection

transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath

• kky-ykk transcribe2texts
• Command injection

xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

• xhtml2pdf
• Command injection

@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name

• @runnerty/executor-decompress
• Command injection