Command injection.

OS command injection in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Command injection

OS command injection in Dell PowerProtect Data Domain Virtual Edition

• Dell PowerProtect Data Domain Virtual Edition
• Command injection

OS command injection in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Command injection

OS command injection in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Command injection

Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

• Linksys WAG200G
• Command injection

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

• Command injection

>=0.4.0, <0.47.1 · fixed in 0.47.1

Sunhillo SureLine OS Command Injection via networkDiag.cgi

• Sunhillo Corporation SureLine
• Command injection

Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305

• TP-Link Systems Inc. RE305 v3
• Command injection

Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305

• TP-Link Systems Inc. RE305 v3
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

• Tanium Certificate Manager
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

• Tanium Threat Response
• Command injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

• Adobe Campaign Classic
• Command injection

Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility

• Autodesk Fusion Post Processor Utility
• Command injection

desmondmorris node-tesseract Command Builder tesseract.js process os command injection

• desmondmorris node-tesseract
• Command injection

Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation

• WatchGuard Fireware OS
• Command injection
• Authentication bypass

Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection

• WatchGuard Fireware OS
• Command injection
• Authentication bypass

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

• Path traversal
• Command injection

<3.2.0 · fixed in 3.2.0

GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution

• Command injection

>=3.1.30, <3.2.0 · fixed in 3.2.0

hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

• masc-ucsc hagent
• Command injection

Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

• alishahid74 kali-gpt
• Command injection

mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir

• bitscorp-mcp mcp-ffmpeg
• Command injection

esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

• horw esp-mcp
• Command injection

sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

• codefriar sf-mcp
• Command injection

ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

• atxp gemini-cli-extension
• Command injection

DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

• hyperb1iss droidmind
• Command injection

ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status

• ai-sdlc
• Command injection

OS command injection in Hitachi Energy CoreTec 5 and others

• Hitachi Energy CoreTec 5
• Hitachi Energy CoreTec 4
• Command injection

iofogctl command injection via Controller provisioning response

• Eclipse Foundation Eclipse ioFog
• Command injection

OS Command Injection Vulnerability in HiRDB

• Hitachi HiRDB Server Version 10
• Hitachi HiRDB Server Version 9
• Command injection

Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

• SMCI MBD-X12SPI
• Command injection

Supermicro BMC's syslog feature contains a command injection vulnerability

• SMCI MBD-X12STW-F
• Command injection

SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

• Moxa OnCell G3150A-LTE Series
• Command injection

Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host

• Apache Software Foundation Apache Airflow SSH provider
• Command injection

TOTOLINK A950RG firewall.so apmib_set command injection

• TOTOLINK A950RG
• Other injection
• Command injection

TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

• TOTOLINK A950RG
• Other injection
• Command injection

TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection

• TOTOLINK A950RG
• Other injection
• Command injection

Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection

• Sunwood-ai-labs github-kanban-mcp-server
• Command injection

Avocent ACS8000 wsserver command injection

• Vertiv Avocent ACS8000
• Command injection

Unauthenticated RCE Vulnerability in WolfProt interface implementation

• WolfVision Cynap Pure (Next Gen), Cynap Bridge
• WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
• Command injection

Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter

• dolibarr
• Command injection

Z.ai Zcode Sed Command Filter os command injection

• Z.ai Zcode
• Command injection

continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection

• Continue
• Command injection

QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

• QuantGeekDev docker-mcp
• Command injection

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh.

• Command injection

dbcli mycli Whitelist source.py source_special_command_is_safe os command injection

• dbcli mycli
• Command injection

Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection

• Unitree Robotics Unitree Go2
• Command injection

Travisun Opptrix Schedule API setup command injection

• Travisun Opptrix
• Other injection
• Command injection

virtualenv: Bash prompt values can change meaning under older compatibility modes

• Command injection

<21.14.9 · fixed in 21.14.9

virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)

• Command injection

>=21.14.9, <21.14.13 · fixed in 21.14.13

@rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function

• Command injection

<=1.0.1 · no fixed version yet

@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function

• Command injection
• Code injection

<=1.0.1 · no fixed version yet

@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

• Command injection

<=1.0.1 · no fixed version yet

Cacti: Authenticated RCE on Data Input

• cacti
• Command injection

DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root

• DJI CrystalSky ZS600C
• Command injection

DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

• DJI CrystalSky ZS600C
• Command injection
• Broken access control

Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection

• Zimbra Collaboration Suite
• Command injection

Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings

• aider
• Command injection

OS command injection in ASUS Router

• ASUS Router
• Command injection

OS command injection in ASUS Router

• ASUS Router
• Command injection
• Cross-site request forgery (CSRF)

An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metachar…

• Command injection