Command Injection
Monthly
Command injection in IBM QRadar SIEM allows an authenticated privileged user to execute arbitrary OS commands at normal user privilege level due to insufficient input validation (CWE-78). Affected versions span QRadar 7.5.0 through 7.5.0 UP 15 Interim Fix 005 and 7.6.0.0 through 7.6.0.1, placing enterprise security operations centers at risk if SIEM operator accounts are compromised or misused by insiders. No public exploit code exists and no active exploitation is confirmed; EPSS places this at the 13th percentile (0.22%), indicating minimal near-term mass-exploitation probability.
Command injection in Fledge's backup-restore upload handler allows an authenticated administrator to execute arbitrary OS commands on the underlying host by uploading a crafted tar archive. The vulnerable function upload_backup() in python/fledge/services/core/api/backup_restore.py constructs a shell command via unsanitized string formatting and passes it directly to os.system(), while filename validation only checks prefix and suffix - a filename such as fledge_backup_$(id>/tmp/pwn).db satisfies both checks while embedding a shell command substitution. CVSS 7.2 (PR:H) reflects the admin privilege prerequisite; no public exploit or CISA KEV listing has been identified at time of analysis, but the technique is trivially reproducible given access.
OS command injection in @oblique/cli 15.4.0 allows arbitrary shell command execution on the local system when a developer invokes the project-creation feature with a crafted project name. The CLI passes user-supplied input directly into shell commands via string concatenation before calling Node.js execSync(), meaning shell metacharacters (semicolons, backticks, pipes) in the project-name argument are interpreted by the OS shell. The attack is limited to local execution contexts - an attacker must either control the project name passed to the CLI or socially engineer a developer into supplying a malicious string. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor patch (>=15.4.2) is available.
OS command injection in the backmeup npm package allows any attacker who can supply input to the package's name, source, destination, or filter options to execute arbitrary shell commands on the backup host or, when SSH mode is configured, on the remote SSH target. The flaw stems from direct string concatenation of option values into shell command strings executed via child_process or ssh2-exec, with no neutralization of metacharacters beyond path.normalize() and path.join(). No public exploit has been identified at time of analysis, but the CVSS vector (PR:L, AV:N, AC:L) indicates this is straightforwardly exploitable by any low-privilege application user whose input reaches the vulnerable call sites.
OS command injection in the Backup Migration WordPress plugin (all versions through 2.1.5.1) allows authenticated attackers holding Administrator-level access - or any user granted the plugin's custom `do_backups` capability - to execute arbitrary operating-system commands as the web-server user. The flaw stems from misuse of `esc_attr()`, an HTML sanitizer, as a shell sanitizer in the `restoreBackup()` AJAX handler, enabling shell metacharacter injection into an `exec()` call. This represents an incomplete remediation of CVE-2023-7002; the equivalent fix applied to `handleQuickMigration()` was never ported to the `$backupName` variable path. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
OS command injection in HashBrown CMS through version 1.4.6 allows any authenticated user with project configuration access to execute arbitrary OS commands on the server by embedding shell metacharacters in the Git deployer's branch field - an attack surface left exposed by the incomplete remediation of CVE-2020-6948, which fixed single-quote injection in git clone fields but not the branch parameter in the git checkout invocation. GitDeployer.validate() blocks only single-quote characters, leaving semicolons, pipes, ampersands, backticks, and command substitution syntax freely injectable; once planted, the malicious branch value fires automatically on every subsequent deployer operation (media upload, content save) without further attacker interaction. No public exploit code or confirmed active exploitation has been identified at time of analysis, but the attack is mechanistically trivial given the complete absence of metacharacter filtering.
OS command injection in HashBrown CMS through version 1.4.6 enables any authenticated user holding media resource scope to execute arbitrary shell commands on the server by exploiting a discrepancy between two filename-parsing functions. The MIME-type filter in getMIMEType() truncates filenames at the first '?' character - accepting 'x.jpg?$(command)' as a valid image - while Node.js Path.extname() does not truncate at '?', allowing the full malicious suffix to flow unescaped into a shell exec() call inside the thumbnail generation routine. No public exploit code or CISA KEV listing has been identified at time of analysis, but the technique is well-understood and requires only low-privilege access, making it a meaningful risk for any internet-accessible deployment.
Command injection in H3C NX15 V100R017 allows authenticated remote attackers to execute arbitrary OS commands via the unsanitized `my2P4key` argument processed by the `esps.wan.repeater.set/repeaterproc` handler at the `/api/esps` endpoint. The CVSS 4.0 vector confirms high-privilege authentication is required (PR:H), yet successful exploitation yields full host compromise with confidentiality, integrity, and availability all rated High. A public Python proof-of-concept exploit script is available on GitHub, materially raising urgency for administrators of internet-exposed devices or those using default credentials.
OS command injection in H3C NX15 firmware V100R017 enables authenticated remote attackers to execute arbitrary operating system commands by manipulating the File argument in the file.exec function exposed via the /api/esps Backend RPC endpoint. A public Python proof-of-concept exploit script is available on GitHub, substantially lowering the barrier to exploitation for less-skilled actors. No vendor-released patch has been identified at time of analysis, leaving affected deployments dependent on compensating controls.
Command injection in H3C NX15 firmware V100R017 permits network-accessible, authenticated attackers to execute arbitrary operating system commands via the /api/esps API endpoint by manipulating the reload.reload_config function parameter. The vulnerability, classified as CWE-77 (Command Injection), carries a CVSS 4.0 score of 7.3 and affects this specific H3C networking device firmware version. A public proof-of-concept exploit - titled 'service_add_root_rce' - has been published to GitHub, indicating root-level code execution is achievable; no vendor patch has been identified at time of analysis.
Command injection in H3C NX15 firmware V100R017 allows authenticated remote attackers with high privileges to execute arbitrary OS commands by supplying a maliciously crafted value in the `esps.apcm.version` argument of a DELETE request to the `/api/esps` API endpoint. The exploit has been publicly disclosed on GitHub, raising the risk for exposed devices with reachable management interfaces. No active CISA KEV listing exists, but the publicly available proof-of-concept lowers the bar for motivated attackers who already hold administrative credentials.
Command injection in Google::Auth for Perl before 0.06 lets an attacker who controls an Application Default Credentials configuration achieve arbitrary code execution. When a 'type: external_account' credentials JSON contains a credential_source.executable block, the Pluggable subclass runs the named command via a single-argument system($command), handing the whole string to /bin/sh -c, and copies the JSON's environment_variables into %ENV first - all with no opt-in gate (the GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLES check was added only in the fix). Reported by CPANSec with no public exploit identified at time of analysis and a low EPSS of 0.20%, but the code path is trivially reachable from the standard ADC flow via GOOGLE_APPLICATION_CREDENTIALS.
Command injection in H3C NX15 firmware V100R017 allows authenticated remote attackers to execute arbitrary OS commands via the `workMode` parameter in the `/api/esps` IPv6 WAN configuration endpoint, likely yielding root-level device takeover based on the published PoC repository name. A public proof-of-concept exploit is available on GitHub (E:P confirmed in the CVSS 4.0 vector), significantly lowering the skill bar for anyone who already holds administrative credentials. No vendor patch has been identified at time of analysis, and no CISA KEV listing exists, indicating no confirmed widespread active exploitation.
Command injection in H3C NX15 V100R017 allows authenticated remote attackers to execute arbitrary OS commands as root via the /api/esps management endpoint. The vulnerability exists in the Add function's handling of the esps.filter.url parameter, which is passed unsanitized to a system command (CWE-77). A public proof-of-concept exploit demonstrating root-level remote code execution is available on GitHub, elevating real-world risk beyond the theoretical - though exploitation requires high-privilege credentials, and no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
OS command injection in Lenovo XClarity Orchestrator (LXCO) 2.2.0 enables an authenticated low-privileged attacker to execute arbitrary operating system commands with elevated privileges under a specific, undisclosed circumstance. LXCO is an enterprise data center orchestration platform that manages Lenovo server and chassis infrastructure, making successful exploitation highly impactful to infrastructure availability, integrity, and confidentiality. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor patch is available via the Lenovo advisory.
Remote code execution in Flowise before 3.1.3 arises because its Pyodide Python-code validator (validatePythonCodeForDataFrame) can be defeated with Unicode homoglyph identifiers, letting an attacker run arbitrary Python that escapes the Pyodide sandbox and executes OS commands on the Flowise host with the process's privileges. The affected CSV Agent and Airtable Agent nodes gate LLM-generated (and config-supplied) Python through an ASCII word-boundary regex blacklist, which Python's NFKC identifier normalization silently rewrites back into the forbidden dunders. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the GitHub advisory documents a complete, reproducible bypass technique, so weaponization is straightforward; the vendor rates it 9.5 (CVSS 4.0).
Command injection in GL.iNet AX1800 router firmware up to version 4.8.3 allows a low-privileged authenticated remote attacker to execute arbitrary OS commands via the `remove_rule` RPC endpoint. The vulnerable parameter `args.id` in `/usr/share/gl-ngx/oui-rpc.lua` is passed unsanitized to a shell command, enabling full device takeover. No public KEV listing exists, but a proof-of-concept exploit is publicly available on GitHub, meaningfully lowering the barrier to exploitation.
Remote code execution in Flowise (flowise and flowise-components <= 3.1.2) is possible through the CSVAgent node, which executes user-supplied Python in a pyodide runtime. A regex denylist blocks imports and dangerous builtins, but attackers bypass it entirely by calling the pre-imported pandas library's read_pickle() to deserialize an attacker-controlled base64 pickle, achieving arbitrary command execution. A detailed working proof-of-concept (pickle __reduce__ gadget plus a custom file-like reader class to feed the payload) is published in the vendor GHSA advisory; publicly available exploit code exists, but there is no public exploit identified as being used in the wild and it is not in CISA KEV.
Unauthenticated remote code execution in Puwell IP Camera firmware versions 2.x through 4.x lets remote attackers achieve root-level control by sending a crafted JSON payload to an undocumented DebugShell service listening on TCP port 34567. Because the service performs neither authentication nor input sanitization, any attacker with network reach to the port can pass operating-system commands directly to the device, resulting in full compromise. Reported by VulnCheck with publicly available exploit code exists; no public evidence of active in-the-wild exploitation (not in CISA KEV).
Command injection in the Zyxel WAX650S Wi-Fi 6 access point firmware enables an authenticated administrator to execute arbitrary OS commands via the "export-cgi" CGI program. All firmware versions through 7.10(ABRM.4)C0 are affected, with full confidentiality, integrity, and availability impact on the device. No public exploit has been identified at time of analysis, and exploitation is gated behind administrator-level credentials, constraining real-world risk to insider threat or post-credential-compromise scenarios.
Command injection in GL.iNet GL-MT3000 router firmware (all versions through 4.4.5) allows unauthenticated remote attackers to execute arbitrary OS commands via the nas-web RPC wrapper's add_user function at /cgi-bin/glc. The vendor has confirmed the vulnerability exists following early disclosure, and a public proof-of-concept exploit is hosted on GitHub, materially lowering the barrier to exploitation. No patched firmware version is identified in the available data; the CVSS 4.0 score of 8.9 with E:P reflects unauthenticated network exploitability with a confirmed public exploit.
Command injection in GL.iNet GL-MT3000 firmware up to version 4.4.5 allows remote attackers to execute arbitrary OS commands through the `set_upgrade` function exposed via the `/cgi-bin/glc` CGI endpoint in `modem.so`. The CVSS 4.0 base score of 8.9 (with E:P reflecting public exploit availability) reflects high confidentiality, integrity, and availability impact on the affected device. A public proof-of-concept exploit has been disclosed on GitHub and the vendor has confirmed the vulnerability's existence, making this an active remediation priority for any network exposing the GL-MT3000 management interface.
Command injection in GL.iNet GL-MT3000 firmware up to version 4.4.5 exposes the device to full remote compromise through its modem management CGI endpoint. The vulnerable remove_profile function within modem.so accepts unsanitized input via /cgi-bin/glc, enabling arbitrary OS command execution without authentication. A public proof-of-concept exploit is hosted on GitHub, materially lowering the barrier for opportunistic exploitation; no vendor-released patch has been confirmed at time of analysis.
OS command injection in ClearOS 7.9's Log Viewer component allows authenticated attackers to execute arbitrary commands as the webconfig user and immediately escalate to full root access via default NOPASSWD sudo privileges. The vulnerable parameter (`filter`) in `File.php` is interpolated directly into a shell command without sanitization, making exploitation trivial once credentials are obtained. A public proof-of-concept exploit is available via lazytitan.ro and documented by VulnCheck; no CISA KEV listing is present, so confirmed widespread active exploitation has not been established at time of analysis.
Remote command injection in GL-iNet GL-MT3000 firmware (up to version 4.4.5) allows unauthenticated network attackers to execute arbitrary OS commands on the device by supplying a malicious public_key argument to the server.set_peer function exposed via the /cgi-bin/glc CGI endpoint of the WireGuard server native plugin (wg-server.so). The vendor has confirmed the vulnerability following coordinated disclosure, and a public proof-of-concept exploit is available on GitHub, materially lowering the barrier to exploitation. No publicly confirmed KEV-listed active exploitation is identified at time of analysis, though the combination of unauthenticated network access, high-impact command execution, and available POC makes this an urgent remediation priority for any deployment.
Remote command injection in the GL-iNet GL-MT3000 travel router (firmware 4.4.0-4.4.5) allows unauthenticated network-adjacent or internet-exposed attackers to execute arbitrary OS commands by supplying a maliciously crafted `private_key` argument to the WireGuard server public key generation endpoint at `/cgi-bin/glc`. The vendor has confirmed the vulnerability, and a public proof-of-concept exploit is available on GitHub, significantly lowering the barrier to exploitation. No active exploitation has been confirmed by CISA KEV, but the combination of PR:N attack profile and public POC warrants urgent remediation on any internet-exposed device.
Unauthenticated remote command injection in GL-iNet GL-MT3000 firmware (versions 4.4.0 through 4.4.5) allows network-adjacent or remote attackers to execute arbitrary OS commands by sending a crafted request to the /cgi-bin/glc CGI endpoint with a manipulated port argument passed to the s2s.enable_echo_server function. The vendor has confirmed the vulnerability, the CVSS 4.0 base score is 8.9 with full high-impact ratings across confidentiality, integrity, and availability, and a public proof-of-concept exploit is available on GitHub, materially lowering the exploitation bar. No public CISA KEV listing exists at time of analysis, but the combination of unauthenticated network access and a published PoC makes active exploitation a near-term realistic risk.
Remote command injection in GL-iNet GL-MT3000 firmware through version 4.4.5 allows unauthenticated network attackers to execute arbitrary OS commands via crafted package name input to the plugins.install_package or plugins.remove_package functions exposed through the /cgi-bin/glc CGI endpoint. The CVSS 4.0 vector confirms no authentication, no complexity barriers, and full confidentiality, integrity, and availability impact on the vulnerable system. A public proof-of-concept exploit is available on GitHub, no public exploit identified in CISA KEV at time of analysis, but the combination of unauthenticated network access and live exploit code makes this a high-urgency issue for any deployment with an internet-exposed management interface.
Remote command injection in GL.iNet GL-MT3000 routers (firmware 4.4.0-4.4.5) allows unauthenticated network attackers to execute arbitrary OS commands by supplying crafted shell metacharacters in the Hostname argument to the ovpn-client.get_recommend_config function exposed via the /cgi-bin/glc CGI endpoint. The vendor has confirmed the vulnerability's existence, and a public proof-of-concept exploit is hosted on GitHub, materially lowering the exploitation barrier. No public exploit identified as confirmed actively exploited (CISA KEV) at time of analysis, but the PR:N/UI:N posture combined with a live PoC makes opportunistic exploitation against internet-exposed travel routers a credible near-term risk.
OS command injection in Telenia Software TVox allows authenticated high-privilege attackers to execute arbitrary operating system commands via the unsanitized `pid` parameter in `action_audio.php`. Affected deployments span TVox 26.x through 26.5.3 and 24.x through 24.9.21, running on an Apache/PHP stack where successful exploitation yields command execution as the `apache` system user. A publicly available proof-of-concept exploit exists (KarmaInSecurity KIS-2026-15, confirmed by VulnCheck), though no CISA KEV listing is present, indicating active exploitation is not yet confirmed at scale.
OS command injection in OpenWrt's luci-app-dockerman grants any authenticated user holding only the read ACL full root-level code execution on the affected router. The vulnerable run_ttyd handler in the ucode docker_rpc.uc backend constructs a shell command from attacker-controlled request fields (id, cmd, uid) and passes them unsanitized to system() within the rpcd root context, reachable via a simple HTTP POST to /ubus. Only LuCI master and openwrt-25.12 snapshots after the JS-to-ucode backend conversion are affected; upstream patch commits exist but no released patched snapshot version was confirmed as of the advisory, and no public exploit is identified at time of analysis.
Remote command injection in GL.iNet GL-MT3000 router firmware (versions 4.4.0 through 4.4.5) allows unauthenticated network-reachable attackers to execute arbitrary OS commands by supplying a crafted filename argument to the ovpn-client.check_config function exposed via the /cgi-bin/glc CGI endpoint. The vendor confirmed the vulnerability's existence, and a public proof-of-concept exploit is published on GitHub (StrTzz123/iot_vul), materially lowering the bar for exploitation. The CVSS 4.0 score of 8.9 with exploit maturity E:P reflects a high-priority, real-world risk of complete device compromise with no authentication or user interaction required.
Command injection in the GL.iNet GL-MT3000 router's Network Lua RPC Plugin allows authenticated remote attackers to execute arbitrary OS commands by injecting shell metacharacters into the `switch` argument of the `network.switch_info` or `network.switch_status` RPC methods. Firmware versions 4.4.0 through 4.4.5 are confirmed affected, with the vendor acknowledging the vulnerability following coordinated disclosure. A public proof-of-concept exploit has been published on GitHub (E:P reflected in the CVSS 4.0 vector), no public exploit identified as confirmed actively exploited (CISA KEV), though the low complexity and available PoC materially lower the bar for exploitation.
Command injection in GL.iNet GL-MT3000 firmware versions 4.4.0 through 4.4.5 allows an adjacent, low-privileged attacker to execute arbitrary OS commands by manipulating the `record_size` argument in the `logread.set_config` RPC function of the Logread Lua plugin. A proof-of-concept exploit has been publicly released on GitHub, and the vendor confirmed the vulnerability exists following early disclosure. While not yet listed in CISA KEV, the combination of low attack complexity, public exploit code, and full high-impact confidentiality/integrity/availability compromise makes this a credible and actionable risk for any network where GL-MT3000 devices are deployed.
Remote command injection in GL.iNet GL-MT3000 router firmware (versions 4.4.0-4.4.5) allows an authenticated network attacker to execute arbitrary OS commands by manipulating the `module` argument of the `logread.get_system_log` RPC function in the Logread Lua plugin. The vendor confirmed the vulnerability following coordinated disclosure, and a public proof-of-concept exploit is available on GitHub. No publicly available exploit confirms CISA KEV-level active exploitation at time of analysis, though the combination of a PoC and a widely used consumer router creates meaningful opportunistic risk.
OS command injection in the Serverless-Devs CLI (@serverless-devs/s versions 3.1.11 and earlier) lets an attacker execute arbitrary commands on a developer's machine when they run 's init' with a crafted, attacker-influenced argument. The tool passes unsanitized input into child_process.spawn() with shell:true, and the single guard check - requiring the value to end in '.git' - is trivially satisfied by an attacker while still smuggling shell metacharacters. Publicly available exploit code exists (a proof-of-concept gist), SSVC rates technical impact as total and automatable, but EPSS remains low at 0.48% and it is not in CISA KEV.
Root-level OS command injection in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 lets attackers inject shell metacharacters into a parameter that is passed unsanitized to a system command, yielding arbitrary command execution as root. OpenMediaVault is a Debian-based network-attached-storage (NAS) management platform, and the -md plugin manages Linux mdadm software RAID arrays. Publicly available exploit code exists (a proof-of-concept gist is referenced), though there is no public exploit identified in CISA KEV; EPSS is modest at 0.62% (46th percentile).
Remote OS command execution in ArcadeDB before 26.7.2 is reachable by authenticated schema administrators through JavaScript trigger scripts, because ScriptTriggerExecutor grants sandbox access to the full java.lang.* package, allowing direct invocation of java.lang.Runtime.getRuntime().exec() or ProcessBuilder. Any account holding UPDATE_SCHEMA permission can create a trigger that fires OS commands server-side against the underlying host process. No public exploit has been identified at time of analysis, but SSVC rates the technical impact as total and the attack as automatable, and the GHSA advisory provides sufficient implementation detail to lower the barrier for capable threat actors.
Command execution in GitPython 3.1.50 arises because its default unsafe-option gate fails to recognize joined short-option syntax, letting an attacker who controls clone options smuggle -u<helper> (the short form of --upload-pack=<helper>) past the block on --upload-pack/-u. Applications calling Repo.clone_from with attacker-influenced multi_options and allow_unsafe_options=False are affected, allowing Git to execute an arbitrary helper command during clone despite the safety gate being active. Reported by VulnCheck with a working local proof-of-concept; publicly available exploit code exists, but there is no public exploit identified as used in active attacks and it is not in CISA KEV.
Command injection and arbitrary file overwrite in GitPython before 3.1.51 expose applications that pass attacker-controlled arguments to four public API methods. `Repo.archive()` and `git.ls_remote()` forward caller-supplied keyword arguments into the git argument vector without consulting GitPython's own unsafe-options denylist, enabling arbitrary command execution via options such as `--exec` or `--upload-pack`. `Repo.iter_commits()` and `Repo.blame()` accept unsanitized revision strings without a leading-dash check, so a value like `--output=/path/to/file` is interpreted by git as an option, truncating an arbitrary file. No public exploit code or CISA KEV listing was identified at time of analysis; a vendor-released patch is available in 3.1.51.
Poisoned-pipeline command injection in Wazuh's GitHub Actions CI/CD workflows (all revisions before commit 44bf114) lets an unauthenticated external attacker run arbitrary shell commands on the project's self-hosted runners by submitting a fork pull request containing a crafted VERSION.json. Because the JSON is read into environment variables that are interpolated verbatim into workflow run steps, shell metacharacters break out into command execution, permitting theft of CI secrets such as GITHUB_TOKEN and AWS credentials. There is no public exploit identified at time of analysis, but the technique (untrusted fork input on self-hosted runners) is well-understood and the vendor has already merged a fix.
Command injection in GitPython before 3.1.51 allows low-privileged attackers to bypass the `check_unsafe_options` blocklist by supplying abbreviated git option names that git's CLI resolves to dangerous long-options at runtime. This is an incomplete fix of CVE-2026-42215 (patched in 3.1.47): the guard canonicalizes only underscore-to-hyphen but does not model git's unambiguous long-option prefix abbreviation feature, so a kwarg like `upload_p` passes the blocklist unchanged yet arrives at git as `--upload-pack`, enabling arbitrary command execution. No CISA KEV listing or confirmed public exploit code was identified at time of analysis, though the GHSA advisory includes precise source code and sufficient technical detail to substantially lower exploitation barrier.
OS command injection in the VPN module of TP-Link Archer AXE75 V1 routers allows an adjacent, authenticated attacker with administrator-level access to achieve full device compromise by importing a specially crafted VPN client configuration file. Improper filtering of special characters (CWE-78) in configuration input permits injection of arbitrary OS commands, granting an attacker complete control over the device including configuration integrity, network routing, and service availability. No public exploit identified at time of analysis; vendor-released patch is available.
Command injection in the system.upgrade_check interface of multiple Cudy router models (TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600, WR6500) lets remote attackers run arbitrary commands as root via crafted input. Per the CVSS vector (PR:N/UI:N), no authentication or user interaction is required, and CISA SSVC marks the flaw as automatable with total technical impact. There is no public exploit identified at time of analysis, and the EPSS score is a moderate 1.21% (65th percentile).
OS command injection in pgAdmin 4 (all versions before 9.18) lets an authenticated user with the commonly-granted tools_import_export_data permission run arbitrary commands on the pgAdmin server host. The Import/Export Data tool renders a user-supplied query into a psql \copy (...) command line; its hand-written parenthesis-balance validator (_is_query_parens_balanced) wrongly assumes standard_conforming_strings=off, treating a backslash-quote (\') as an escaped quote, so a payload like SELECT 'a\') TO PROGRAM 'echo pwned' x' passes validation while real psql (scs=on, the default on PostgreSQL 13-18) closes the string early and executes an attacker-chosen TO PROGRAM clause via popen(). No CISA KEV listing and no standalone public exploit, but the fix commit's regression test discloses a fully working RCE payload; EPSS not provided.
Command injection in pgAdmin 4's MASTER_PASSWORD_HOOK feature exposes the pgAdmin service account to arbitrary OS command execution by any authenticated user whose identity originates from an external auth source (OAuth/OIDC, Kerberos, webserver headers). Affected deployments span versions 7.2 through 9.16, but only those with the hook configured to use the `%u` substitution token alongside an external IdP where usernames can be attacker-influenced. No public exploit code or CISA KEV listing exists at time of analysis; however, the commit diff publicly discloses the exact vulnerable code path, significantly lowering the barrier to independent exploit development.
Authenticated command execution affects several Hikvision wireless access points (DS-3WAP521-SI, DS-3WAP522-SI, DS-3WAP621E-SI, DS-3WAP622E-SI, DS-3WAP623E-SI, DS-3WAP622G-SI), where insufficient input validation lets an attacker holding valid device credentials send crafted packets carrying malicious commands to achieve arbitrary command execution on the device. The CVSS 3.1 vector (7.2, AV:N/AC:L/PR:H/UI:N) indicates a network-reachable but high-privilege (authenticated) attack with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; the vendor has published a security advisory.
Command injection in Advantech ADAM-3600 EdgeLink RTU controllers (versions prior to 2.8.5.1) lets remote attackers execute arbitrary operating-system commands by abusing the firmware upgrade file verification routine. The device fails to sanitize input consumed while validating an uploaded firmware image, so crafted content is passed to a shell context. No public exploit identified at time of analysis, and the EPSS score is low (0.14%), but the CVSS 9.8 rating and the device's role as an industrial edge controller make this a high-value target.
Root-level command injection in Cudy TR- and WR-series routers lets attackers run arbitrary OS commands through the ipsec_conn interface, which fails to sanitize user-supplied input before passing it to a shell context. Affected models span TR1200 (v2.4.15), TR3000 (v2.4.21), WR300 (v2.4.25), WR1200 (v2.4.23), WR1300 (v2.4.22), WR1500 (v2.3.10), WR3000 (v2.4.19), WR3600 (v2.3.16), and WR6500 (v2.3.15). No public exploit identified at time of analysis, and CISA SSVC records exploitation status as none; EPSS is modest at 1.21% (65th percentile), so this is a high-severity design flaw without evidence of widespread exploitation yet.
Command injection in Cudy TR1200 (firmware v2.4.15) and TR3000 (firmware v2.4.21) routers via the system.setclock interface enables an authenticated administrator to execute arbitrary OS commands with root privileges. The vulnerability stems from unsanitized input passed directly to a system command, yielding full device compromise - confidentiality, integrity, and availability all rated high. No public exploit or active exploitation (CISA KEV) has been identified; EPSS of 1.21% at the 65th percentile reflects moderate relative risk among disclosed CVEs but low absolute exploitation probability.
Command injection in Cudy's OpenWRT-based router firmware allows remote attackers to execute arbitrary commands as root through the system.setclock interface, affecting multiple TR- and WR-series models (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, WR6500 v2.3.15). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates unauthenticated network-based exploitation with total system compromise, and CISA's SSVC framework rates it Automatable with Total technical impact. No public exploit is identified at time of analysis and it is not in CISA KEV; EPSS is modest at 1.21% (65th percentile).
OS command injection in the IBM Hardware Management Console (HMC) lets a remote, unauthenticated attacker run arbitrary commands with elevated privileges on the management appliance. It affects HMC V10.3.1050.0 through 10.3.1064.0 and V11.1.1110.0 through 11.1.1112.0, the systems used to manage IBM Power servers (including Novalink deployments), stemming from improper validation of user-supplied input (CWE-78). No public exploit has been identified at time of analysis, but the network-reachable, no-authentication vector and 9.8 CVSS make this a top-priority patch.
Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.1 allows remote attackers to run arbitrary OS commands by injecting shell-control environment variables into the MCP (Model Context Protocol) stdio launcher. The DANGEROUS_ENV_VARS blocklist in src/lfx/src/lfx/base/mcp/util.py omits SHELLOPTS, BASHOPTS, and PS4, letting an attacker abuse Bash's xtrace behavior to execute commands when a stdio-based MCP server subprocess is spawned. Rated CVSS 9.8 with a network, no-privilege, no-interaction vector; a vendor patch is available, but no public exploit code or CISA KEV listing has been identified at the time of analysis.
Command injection in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.27 and 13.0.1.0-13.0.7.2) lets a remote attacker execute arbitrary OS commands by injecting CRLF characters that break the intended neutralization of command input. Rated CVSS 9.8 (network, no authentication, no user interaction) with total confidentiality, integrity, and availability impact; a vendor patch is available. There is no public exploit identified at time of analysis, and EPSS probability is modest at 0.50% (40th percentile).
Privilege escalation via OS command injection affects Eaton's Tripp Lite series PADM firmware (versions 0 through 20), where a low-privileged authenticated user can abuse a session management interface that improperly validates input to gain unrestricted device access. The flaw (CWE-78) carries a CVSS 8.8 and, because the affected PADM 20 line has reached end-of-life, there is no forthcoming firmware patch. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Command injection in Eaton's Tripp Lite Series PADM firmware (versions 0 through 20) lets an authenticated administrator run arbitrary operating-system commands through a session-management interface that fails to properly validate input, escaping the intended restricted command environment. The flaw carries CVSS 8.3 (CWE-78) and is notable because the affected firmware line is end-of-life, meaning no security updates are being produced. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so exploitation currently requires an actor who already holds administrative credentials on the device.
Remote code execution in Phoenix Contact CHARX SEC series EV charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 through before 1.9.1) allows an unauthenticated network attacker to inject commands into the system configuration that are subsequently executed with root privileges. The CVSS 4.0 base score of 9.3 reflects network-reachable, no-privilege, no-interaction exploitation with full confidentiality, integrity, and availability impact on the device. No public exploit identified at time of analysis, but the vendor (via CERT@VDE) has released a patched version.
Local privilege escalation in Phoenix Contact CHARX SEC EV charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 up to 1.9.1) allows a low-privileged local user to execute arbitrary commands as root through a vulnerable init-script for user-applications, yielding full system compromise. Reported by CERT@VDE and classified as OS command injection (CWE-78), the flaw carries a CVSS 4.0 base score of 8.5 (local vector, low privileges required). A vendor patch (1.9.1) is available; no public exploit identified at time of analysis.
Privilege escalation in Phoenix Contact CHARX SEC electric-vehicle charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 up to but excluding 1.9.1) lets a low-privileged local user inject and run arbitrary OS commands as root through the device's system configuration handling, yielding full compromise of the charging controller. The flaw is a CWE-78 OS command injection reported by CERT@VDE (advisory VDE-2026-008), and a vendor patch is available in version 1.9.1. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
OS command injection in Phoenix Contact CHARX SEC EV charging controllers allows an unauthenticated remote attacker who controls the OCPP backend (reached via a firewall-bypass) to execute arbitrary commands as the limited charx-oa user, potentially interrupting vehicle charging. It affects CHARX SEC-3000, SEC-3100, SEC-3050 and SEC-3150 versions 1.0.0 up to but not including 1.9.1, and is fixed in 1.9.1. There is no public exploit identified at time of analysis, and the CVSS 4.0 base score is 8.8 (High).
Local privilege escalation in the Phoenix Contact CHARX SEC EV charging controllers (SEC-3000/3050/3100/3150, firmware 1.0.0 through 1.9.0) lets the low-privileged local account 'charx-web' inject and run arbitrary OS commands as root via the udhcpc DHCP client, yielding full device takeover. The flaw is a CWE-78 OS command injection reported by CERT@VDE, and a vendor patch (1.9.1) is available. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local privilege escalation in Phoenix Contact CHARX SEC-3000/3050/3100/3150 EV charging controllers (firmware 1.0.0 through versions before 1.9.1) lets a low-privileged local user inject OS commands through a network-configuration script and gain root, yielding full device compromise. The flaw is a classic CWE-78 command injection reachable by any authenticated local account (CVSS 4.0 8.5). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Local privilege escalation in Phoenix Contact CHARX SEC electric-vehicle charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 through 1.9.0) lets a low-privileged local user inject OS commands via the user-application init-script and execute them as root, yielding full device compromise. The flaw was reported by CERT@VDE and is fixed in firmware 1.9.1; no public exploit has been identified at time of analysis, and it is not listed in CISA KEV. EPSS data was not provided, so widespread automated exploitation cannot be confirmed.
Local privilege-relevant command injection in Performance Co-Pilot's (PCP) linux_sockets PMDA lets an authenticated user inject shell metacharacters through the network.persocket.filter metric, causing arbitrary commands to run as the PMDA user each time metrics refresh. Reported by Red Hat, it affects the pcp packages shipped across Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
OS command injection in dnsmgr version 2.15 and earlier lets an attacker execute arbitrary commands through the ping function in CheckUils.php, which passes unsanitized input into a system shell call (CWE-77). SSVC rates the technical impact as total and marks exploitation as proof-of-concept, so publicly available exploit code exists, though it is not on CISA KEV and EPSS is low (0.15%). The published CVSS is 9.8, but note the description characterizes the attacker as 'local' while the CVSS vector encodes AV:N - this discrepancy affects real-world exposure and should be resolved against the target deployment.
Root-level command injection in the net.set_wan interface of multiple Cudy router models (TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600, WR6500) allows attackers to execute arbitrary OS commands as root by supplying crafted input to WAN configuration parameters. The NVD-assigned CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) rates this 9.8 Critical, implying full network-reachable compromise with no privileges required. No public exploit code and no CISA KEV listing were identified at time of analysis, so there is no public exploit identified at this time; the vendor has published security advisory cudy-sa-26-7-jezzy-4.
Arbitrary OS command execution is possible in IBM Aspera Faspex 5 (versions 5.0.0 through 5.0.15.4) through unquoted shell interpolation, allowing a remote attacker who has already obtained high-privilege authentication to run arbitrary commands on the underlying host. The CVSS vector (AV:N/AC:L/PR:H) confirms network reachability with low attack complexity once authenticated, resulting in full confidentiality, integrity, and availability compromise. No public exploit code or CISA KEV listing has been identified at time of analysis; IBM has released a patch via the advisory at https://www.ibm.com/support/pages/node/7280530.
Shell command injection in IBM Aspera Faspex 5 (versions 5.0.0 through 5.0.15.4) permits a remote attacker holding high-privilege credentials to execute arbitrary operating system commands on the underlying server. The CVSS 7.2 High score reflects full confidentiality, integrity, and availability impact, substantially gated by the PR:H authentication requirement. No public exploit has been identified at time of analysis, and both EPSS (1.04%, 60th percentile) and CISA SSVC (Exploitation: none) align on low current exploitation activity; a vendor patch is confirmed available.
Authenticated OS command injection in ELECOM WAB series routers and access points allows authenticated attackers to execute arbitrary OS commands via the Restore Settings function. Full device compromise is possible, but no active exploitation or public exploit code is known at this time. The vulnerability is rated high severity (CVSS 8.6) but requires administrative credentials to exploit.
Authenticated OS command injection in ELECOM wireless LAN routers and access points allows an attacker with administrative credentials to execute arbitrary operating system commands on the device. Exploitation requires logging into the product's WebUI; no public exploit or active exploitation has been reported at this time. The vulnerability is confirmed by the vendor and JPCERT/CC, with a CVSS 4.0 score of 8.6 (High).
OS command injection in NVIDIA NeMo for Linux allows a local authenticated attacker to execute arbitrary commands, leading to full system compromise (code execution, privilege escalation, data tampering, and information disclosure). No public exploit code or active exploitation has been identified at the time of analysis.
Command injection vulnerability in VeloCloud Orchestrator (VCO) on-premises allows unauthenticated remote attackers to access internal functionality and fully compromise the host system, impacting data managed by the orchestrator. This issue is known to be actively exploited. Hosted and Dedicated VCO versions have been pre-emptively patched.
OS command injection in the backup-restore functionality of Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated administrator to execute arbitrary operating-system commands on the appliance, resulting in complete system compromise (CWE-78, CVSS 8.4). Exploitation requires a high-privilege session (PR:H) and adjacent-network reachability to the management interface (AV:A), where a crafted or manipulated backup causes shell metacharacters to be interpreted by the OS command the restore process runs. No public exploit code has been identified at time of analysis, CISA's SSVC assessment records exploitation as 'none' and not automatable, and EPSS is low at 0.72% (50th percentile); Progress has published patched builds for all affected products.
OS command injection in Progress LoadMaster and related products allows authenticated high-privilege attackers to execute arbitrary operating system commands via the Geo Location management interface, resulting in complete system compromise. Affected products include LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF. No public exploit or active exploitation was identified at the time of analysis.
OS command injection in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges and adjacent network access to execute arbitrary commands through the management interface, leading to full system compromise. No active exploitation or publicly available exploit has been reported at the time of analysis.
Command injection in NoteGen before 0.32.0 allows remote code execution when an attacker can execute JavaScript in the application webview. The default Tauri shell plugin capability permits execution of bash, python, and python3 with arbitrary arguments, enabling the webview to run OS commands with the app's privileges, typically leading to full host compromise via cross-site scripting.
Remote code execution in Catalyst::View::Wkhtmltopdf before 0.6.1 allows unauthenticated attackers to inject arbitrary shell commands via unsanitized PDF render options such as page_size, orientation, or margins. The incomplete fix in 0.6.0 still permits injection. CVSS 9.8, EPSS 0.67% (moderate probability), CISA SSVC indicates automatable and total impact, but no active exploitation reported.
We are tasked to synthesize data about CVE-2026-65711 into a JSON object. We must use all provided data: description, CVSS (especially the CVSS:4.0 vector, note this is CVSS 4.0 not 3.1), EPSS, KEV (not mentioned, assume no KEV), POC (publicly available), CPE, tags, SSVC, ENISA references. We need to output each field as a plain text string, not array/object. First, parse the data: - Description: sysPass through version 3.2.11 contains OS command injection, authenticated admins can set malicious backup path, the FileBackupService builds a tar command via string concatenation with siteBackupPath without escapeshellarg(), passing to exec(). Injected commands persist and execute on every backup trigger. - CVSS Score: 8.6 (note this is likely a CVSS 4.0 score, not 3.1). Provided vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Interpretation: Network attack vector, Low attack complexity, No attack requirements, Privileges Required High, No user interaction, Vulnerable component confidentiality high, integrity high, availability high, subsequent system none. Environmental metrics all X (not defined). So base score 8.6 is derived from those base metrics. - CWE: CWE-78 (OS Command Injection). - Multi-source: EPSS: 2.41% (percentile 82%): This is relatively high, indicating a moderate likelihood of exploitation in next 30 days. Percentile 82% means it's higher than 82% of all CVEs. POC/Exploit: Publicly available (so there is a PoC). Reported by: VulnCheck. CPE: cpe:2.3:a:nuxsmin:syspass:*:*:*:*:*:*:*:* (all versions up to 3.2.11) Tags: Command Injection, Syspass. SSVC: Exploitation: poc, Automatable: no, Technical Impact: total. (So SSVC says PoC exists, not automatable, total technical impact.) ENISA EUVD ID: EUVD-2026-48717, affected versions: sysPass 0 ≤3.2.11. References: - gist.github.com (exploit) - vulncheck advisory - NVD detail No KEV mentioned. So it's not in CISA KEV. So exploitation status: publicly available exploit code exists, but not confirmed actively exploited by CISA. We must produce a comprehensive analysis with all fields. Now for each field: 1. product_name: "sysPass" (3 words? Actually one word, it's the product name) 2. summary: 2-3 sentence plain-language. Start with impact verb and product. "Authenticated OS command injection in sysPass 3.2.11 allows administrators to execute arbitrary commands..." but we need to incorporate all data. Mention that it's authenticated, the mechanism (backup path), EPSS moderate, PoC exists. Not KEV, but publicly available PoC. So: "Authenticated command injection in sysPass up to version 3.2.11 permits administrators with configuration privileges to execute arbitrary OS commands by setting a crafted backup path. The vulnerability resides in FileBackupService's unsanitized string concatenation when building a tar command, allowing injected commands to persist across backup runs. Exploit code is publicly available, and EPSS indicates a 2.41% exploitation probability (82nd percentile)." 3. technical_context: Explain underlying technology: sysPass is a PHP-based password manager. The backup functionality uses PHP exec() to call tar, constructing the command by directly concatenating the user-supplied path. The CWE-78 is OS command injection. Use CPE to identify affected product: cpe:2.3:a:nuxsmin:syspass:*:*:*:*:*:*:*:* (all versions). Root cause is lack of escapeshellarg() or similar sanitization before passing to exec(). 4. risk_assessment: Use CVSS 4.0 vector: AV:N, PR:H, AC:L, UI:N, High impact on confidentiality, integrity, availability. So it's a high-privilege, network-accessible command injection. EPSS 2.41% suggests moderate real-world exploit probability. SSVC: exploitation: PoC (public exploit), not automatable, total technical impact. So risk: It's a critical vulnerability if an admin account is compromised, but it requires high privileges, which limits attack surface unless there is another way to gain admin access. Note: CVSS score 8.6, but PR:H. So it's not a remote unauthenticated RCE; it's post-authentication. However, if admin accounts are weak or another vulnerability grants access, it's severe. The SSVC "not automatable" might indicate it's not easily scripted, but PoC exists, so manual exploitation is possible. The high score is justified given total compromise. Contrast: EPSS moderate, not extremely widespread. We'll say: While CVSS base score is high (8.6), the requirement for administrative privileges significantly reduces the risk in environments with strong admin credential management. The publicly available PoC increases urgency for patching. 5. affected_products: "sysPass versions up to and including 3.2.11 are affected. The product is identified by CPE cpe:2.3:a:nuxsmin:syspass:*:*:*:*:*:*:*:*. Vendor advisory available at VulnCheck (link)." 6. remediation: Vendor-released patch? The description says "through version 3.2.11" implying that version is vulnerable, but no mention of a fix version. The references are an exploit gist and a VulnCheck advisory. No mention of an official patch. So no vendor patch identified? But we should check: The CVE was assigned, maybe a fix is in a later version. Since the description says "through version 3.2.11", maybe 3.2.12 or 3.3.0 exists? We have no data. So we must state: No official patched version confirmed. Workaround: Since the injection is via backup path set by admin, a compensating control: restrict admin access to trusted users only; disable backup functionality if not needed; implement input validation at web application firewall (WAF) to block command injection patterns in the backup path parameter. However, the description says the path is admin-configurable, so likely only admins can set it. So limiting admin accounts is key. If patch not available, maybe monitor. But it's better to say: Upgrade to a patched version once released. As of analysis, no patched version identified. Use network segmentation to restrict access to the sysPass admin interface. 7. exploit_scenario: An attacker who obtains administrative credentials (via phishing, brute force, or another vulnerability) logs into the sysPass admin panel, navigates to the backup settings, and sets the backup path to a value like "/tmp/backup; id > /tmp/pwned". When a backup is triggered (automatically or manually), the injected command executes as the web server user, leading to full command execution and potential lateral movement. 8. exploitation_conditions: Specific conditions: The attacker must have administrative privileges to configure the backup path. The backup functionality must be enabled and triggered (manually or via scheduled task). No other special conditions: the vulnerability exists in the default code path when processing backups. The attack is remote (network), requires authentication as an admin (PR:H), no user interaction beyond setting the malicious path. So: "Requires administrative authentication to sysPass; the backup feature must be enabled and triggered. No additional non-default configurations are required." 9. attack_chain: Using kill chain, we have a 4-step: Access (obtain admin credentials or session) → Exploit (set malicious backup path via admin interface) → Execution (trigger backup, injecting command) → Impact (execute arbitrary OS commands as web user). So: "Gain administrative access to sysPass → Set malicious backup path in settings → Trigger backup operation → The injected OS command executes via exec()" Actually, the injection persists, so it's: "Gain admin access → Inject command in backup path → Wait for or trigger backup → Execute arbitrary commands". But the chain can be: "Authenticate as admin → Navigate to backup configuration → Insert shell metacharacters into backup path → Save configuration → Trigger backup → Execute command". For brevity, we can combine. So: "Obtain admin credentials → Set backup path to include command injection → Initiate backup → Malicious command executes as web server user". That's 4 steps. It's a simple chain. 10. confidence_notes: Based on data: CVE assigned, VulnCheck advisory confirms vulnerability, exploit PoC publicly available. CVSS vector provided by NVD/NIST? Actually the CVSS vector came with the data, likely from NVD. So confirmed by NVD. Patch status unknown; no official fix version mentioned. The CVE description states "through version 3.2.11" so likely later versions may patch it but not confirmed. So: "Vulnerability confirmed by NVD and VulnCheck advisory. Public PoC exploit exists. No patched version identified in available data." 11. prevalence: sysPass is a self-hosted password manager, not as widely deployed as commercial alternatives. It's likely used by small to medium organizations or individuals. So prevalence: low? Possibly medium? It's an open-source project, some enterprise use but not ubiquitous. I'd say low. However, the SSVC says "not automatable" and EPSS 2.41% indicates some scanning? I'll estimate low. But prevalence basis: "open-source password manager, niche deployment". Could be medium if commonly used, but compared to WordPress or Apache, it's low. So "low". 12. prevalence_basis: "self-hosted password manager, modest community adoption". Short. 13. assessed_cvss_vector: We need to produce our own CVSS 3.1 base vector. The provided CVSS is 4.0. We can map the 4.0 base metrics to 3.1 as best we can. CVSS 4.0 has AV:N, AC:L, AT:N, PR:H, UI:N, VC:H, VI:H, VA:H. The 3.1 equivalents: AV:N, AC:L, PR:H, UI:N, S:C? Wait, in CVSS 4.0, scope is not explicitly present; instead we have vulnerable and subsequent system metrics. The attack vector is network, complexity low, privileges high, user interaction none. For scope: in CVSS 4.0, high impact on vulnerable system, low on subsequent. But in 3.1, scope is determined by whether the vulnerable component and impacted component are the same. Here, the vulnerability is in the web application (the vulnerable component) and execution happens on the same machine, so likely the vulnerable component and the impacted component are the same. However, it might be argued that the vulnerable component is the web app, and the impact is on the underlying OS, which is a different component. Typically for command injection in web apps, CVSS 3.1 sets Scope: Changed if the web app's security context is different from the OS command. Many CVSS 3.1 vectors for command injection use S:C. But we need to be consistent. The provided 4.0 set SC:N means subsequent system (after scope change) has no impact? Wait, no: In CVSS 4.0, VC:Vulnerable component confidentiality, VI, VA are high. SC: Subsequent system confidentiality, integrity, availability are all N. This means the vulnerable component (web app) suffers high impact, while the subsequent system (maybe the OS) has none? That doesn't make sense for OS command injection. The CVSS 4.0 user guide says: Vulnerable component is the thing that contains the vulnerability; Subsequent system is the component that suffers the impact if it's different. Here, the vulnerable component is the web application (sysPass). The impact is on the OS where commands are executed. If the web app and OS are considered separate, then the vulnerable component (web app) might have no confidentiality, integrity, availability impact because the exploit doesn't alter the web app itself, but rather the OS. But the injection lets an attacker execute commands as the web server user, which could read files (confidentiality), modify files (integrity), or disrupt service (availability) on the OS. The web app's own data may be accessible too. I think traditional CVSS 3.1 would set Scope Changed and impact on the OS as the target, with Conf/Integ/A
Authenticated administrators can execute arbitrary OS commands on Microweber CMS through 2.0.20 by injecting unsandboxed Twig expressions into mail templates. The vulnerability allows full server compromise once an admin injects a payload, which auto-executes on every mail dispatch event. Public exploit code exists, though no active exploitation is confirmed.
Arbitrary OS command execution in OpenStack Ironic Python Agent (IPA) through version 11.6.0 lets a project-scoped user holding the manager role run attacker-chosen commands on a running IPA ramdisk by supplying a crafted ntp_server value that is passed unsanitized to a shell. Because IPA drives bare-metal provisioning, code execution occurs in the privileged provisioning agent context, enabling full compromise of the node being managed. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Remote unauthenticated code execution in 9router 0.4.59 (by decolua) lets an attacker chain three flaws - a hardcoded default password (123456) accepted on any fresh install, a Host-header spoof that defeats the LOCAL_ONLY network gate, and unsanitized arguments reaching child_process.spawn() during MCP plugin registration - to run arbitrary OS commands on the host. The issue is fixed in 0.4.60, was reported by VulnCheck, and carries a CVSS 4.0 base score of 9.4; no public exploit identified at time of analysis, though the advisory describes a directly reproducible attack path.
OS command injection in gpsd's gpsprof profiling utility (through release-3.27.5) lets an attacker who controls GPS input inject shell commands via the SKY.satellites[].used field. The value is written unsanitized into a gnuplot heredoc, so a crafted used value containing the heredoc terminator EOD closes the data block early and appends gnuplot system() calls that execute as the user running gpsprof in polar mode. No public exploit identified at time of analysis; the flaw is code-execution class (CWE-94) with a CVSS 4.0 base score of 8.5.
Remote code execution in Zohocorp ManageEngine ADAudit Plus (all builds before 8606) allows unauthenticated attackers to run arbitrary OS commands by abusing the product's agent API, which fails to sanitize input passed to a shell (CWE-78). Rated CVSS 10.0 by the vendor with a scope-changing vector, the flaw requires no privileges or user interaction and reaches the network-exposed agent communication channel directly. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the maximal severity and unauthenticated nature make it a high-priority patch for any exposed deployment.
Local privilege-relevant OS command injection in pardus-update (the update manager component of the Turkish national Debian-based distribution Pardus) affects versions 0.6.6 up to but not including 0.7.0, allowing an authenticated local user to inject and execute arbitrary operating system commands via improperly neutralized special characters. Because update tooling typically runs with elevated privileges, successful exploitation can yield full confidentiality, integrity, and availability compromise of the host. Reported by Turkey's national CSIRT (TR-CERT); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
OS command injection in MongoDB Compass allows an attacker to smuggle a malicious 'browser open command' for the OIDC authentication flow into an importable connection file, a setting normally restricted to global Compass application settings and not editable through the connection form. When a victim imports the crafted connection and initiates OIDC authentication, the attacker-controlled command executes on the victim's host with the user's privileges. No public exploit identified at time of analysis, but the CVSS 4.0 base score is 8.4 (High) reflecting full compromise of confidentiality, integrity, and availability of the local system.
Command injection in the Ansible Lightspeed extension for Visual Studio Code lets a crafted project achieve arbitrary code execution on a developer's machine. The extension's ansible.python.activationScript setting is treated as a shell command rather than validated as a file path, so when a victim opens or runs a malicious repository, attacker-controlled content in that setting executes with the privileges of the VS Code process. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Arbitrary code execution in the Visual Studio Code Ansible Lightspeed extension lets an attacker embed shell metacharacters in an Ansible playbook filename that the AnsiblePlaybookRunProvider passes unsanitized to a command invocation. When a developer opens the malicious project and runs the playbook, the injected characters execute arbitrary commands with the privileges of the VS Code user. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the local high-impact profile (CVSS 7.8, C:H/I:H/A:H) makes it a meaningful supply-chain/repository-poisoning risk for Ansible developers.
Local code execution in the Visual Studio Code Ansible (Lightspeed) extension lets a malicious project run arbitrary shell commands on a developer's machine by abusing the ansible.executionEnvironment.containerOptions and volumeMounts settings, which fail to sanitize shell separators (CWE-78). Because these are workspace-scoped settings, simply opening a booby-trapped repository can auto-trigger execution during Language Server initialization, yielding code execution as the VS Code user. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV; CVSS is 7.8 (High).
OS command injection in the SMASH (Systems Management Architecture for Server Hardware) service of Supermicro X14DBG-DAP and X14DBI platforms lets an authenticated attacker inject operating-system commands through SMASH's input handling on the Baseboard Management Controller (BMC). Successful exploitation yields arbitrary code execution on the BMC, enabling data-integrity tampering or a denial-of-service of the management controller. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
OS command injection in Autel MaxiCharger Single EV charging stations (firmware through V1.03.51) lets a malicious or compromised OCPP backend server inject arbitrary operating-system commands via the diagnostics URL parameter of an OCPP GetDiagnostics request. A rogue or hijacked charge-point management server can fully compromise the charger, and publicly available exploit code exists (CyberDanube), though no active exploitation has been confirmed. Because the impact reaches the underlying OS with full confidentiality, integrity, and availability loss, successful attacks give complete control of the charging hardware.
Command injection in IBM QRadar SIEM allows an authenticated privileged user to execute arbitrary OS commands at normal user privilege level due to insufficient input validation (CWE-78). Affected versions span QRadar 7.5.0 through 7.5.0 UP 15 Interim Fix 005 and 7.6.0.0 through 7.6.0.1, placing enterprise security operations centers at risk if SIEM operator accounts are compromised or misused by insiders. No public exploit code exists and no active exploitation is confirmed; EPSS places this at the 13th percentile (0.22%), indicating minimal near-term mass-exploitation probability.
Command injection in Fledge's backup-restore upload handler allows an authenticated administrator to execute arbitrary OS commands on the underlying host by uploading a crafted tar archive. The vulnerable function upload_backup() in python/fledge/services/core/api/backup_restore.py constructs a shell command via unsanitized string formatting and passes it directly to os.system(), while filename validation only checks prefix and suffix - a filename such as fledge_backup_$(id>/tmp/pwn).db satisfies both checks while embedding a shell command substitution. CVSS 7.2 (PR:H) reflects the admin privilege prerequisite; no public exploit or CISA KEV listing has been identified at time of analysis, but the technique is trivially reproducible given access.
OS command injection in @oblique/cli 15.4.0 allows arbitrary shell command execution on the local system when a developer invokes the project-creation feature with a crafted project name. The CLI passes user-supplied input directly into shell commands via string concatenation before calling Node.js execSync(), meaning shell metacharacters (semicolons, backticks, pipes) in the project-name argument are interpreted by the OS shell. The attack is limited to local execution contexts - an attacker must either control the project name passed to the CLI or socially engineer a developer into supplying a malicious string. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor patch (>=15.4.2) is available.
OS command injection in the backmeup npm package allows any attacker who can supply input to the package's name, source, destination, or filter options to execute arbitrary shell commands on the backup host or, when SSH mode is configured, on the remote SSH target. The flaw stems from direct string concatenation of option values into shell command strings executed via child_process or ssh2-exec, with no neutralization of metacharacters beyond path.normalize() and path.join(). No public exploit has been identified at time of analysis, but the CVSS vector (PR:L, AV:N, AC:L) indicates this is straightforwardly exploitable by any low-privilege application user whose input reaches the vulnerable call sites.
OS command injection in the Backup Migration WordPress plugin (all versions through 2.1.5.1) allows authenticated attackers holding Administrator-level access - or any user granted the plugin's custom `do_backups` capability - to execute arbitrary operating-system commands as the web-server user. The flaw stems from misuse of `esc_attr()`, an HTML sanitizer, as a shell sanitizer in the `restoreBackup()` AJAX handler, enabling shell metacharacter injection into an `exec()` call. This represents an incomplete remediation of CVE-2023-7002; the equivalent fix applied to `handleQuickMigration()` was never ported to the `$backupName` variable path. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
OS command injection in HashBrown CMS through version 1.4.6 allows any authenticated user with project configuration access to execute arbitrary OS commands on the server by embedding shell metacharacters in the Git deployer's branch field - an attack surface left exposed by the incomplete remediation of CVE-2020-6948, which fixed single-quote injection in git clone fields but not the branch parameter in the git checkout invocation. GitDeployer.validate() blocks only single-quote characters, leaving semicolons, pipes, ampersands, backticks, and command substitution syntax freely injectable; once planted, the malicious branch value fires automatically on every subsequent deployer operation (media upload, content save) without further attacker interaction. No public exploit code or confirmed active exploitation has been identified at time of analysis, but the attack is mechanistically trivial given the complete absence of metacharacter filtering.
OS command injection in HashBrown CMS through version 1.4.6 enables any authenticated user holding media resource scope to execute arbitrary shell commands on the server by exploiting a discrepancy between two filename-parsing functions. The MIME-type filter in getMIMEType() truncates filenames at the first '?' character - accepting 'x.jpg?$(command)' as a valid image - while Node.js Path.extname() does not truncate at '?', allowing the full malicious suffix to flow unescaped into a shell exec() call inside the thumbnail generation routine. No public exploit code or CISA KEV listing has been identified at time of analysis, but the technique is well-understood and requires only low-privilege access, making it a meaningful risk for any internet-accessible deployment.
Command injection in H3C NX15 V100R017 allows authenticated remote attackers to execute arbitrary OS commands via the unsanitized `my2P4key` argument processed by the `esps.wan.repeater.set/repeaterproc` handler at the `/api/esps` endpoint. The CVSS 4.0 vector confirms high-privilege authentication is required (PR:H), yet successful exploitation yields full host compromise with confidentiality, integrity, and availability all rated High. A public Python proof-of-concept exploit script is available on GitHub, materially raising urgency for administrators of internet-exposed devices or those using default credentials.
OS command injection in H3C NX15 firmware V100R017 enables authenticated remote attackers to execute arbitrary operating system commands by manipulating the File argument in the file.exec function exposed via the /api/esps Backend RPC endpoint. A public Python proof-of-concept exploit script is available on GitHub, substantially lowering the barrier to exploitation for less-skilled actors. No vendor-released patch has been identified at time of analysis, leaving affected deployments dependent on compensating controls.
Command injection in H3C NX15 firmware V100R017 permits network-accessible, authenticated attackers to execute arbitrary operating system commands via the /api/esps API endpoint by manipulating the reload.reload_config function parameter. The vulnerability, classified as CWE-77 (Command Injection), carries a CVSS 4.0 score of 7.3 and affects this specific H3C networking device firmware version. A public proof-of-concept exploit - titled 'service_add_root_rce' - has been published to GitHub, indicating root-level code execution is achievable; no vendor patch has been identified at time of analysis.
Command injection in H3C NX15 firmware V100R017 allows authenticated remote attackers with high privileges to execute arbitrary OS commands by supplying a maliciously crafted value in the `esps.apcm.version` argument of a DELETE request to the `/api/esps` API endpoint. The exploit has been publicly disclosed on GitHub, raising the risk for exposed devices with reachable management interfaces. No active CISA KEV listing exists, but the publicly available proof-of-concept lowers the bar for motivated attackers who already hold administrative credentials.
Command injection in Google::Auth for Perl before 0.06 lets an attacker who controls an Application Default Credentials configuration achieve arbitrary code execution. When a 'type: external_account' credentials JSON contains a credential_source.executable block, the Pluggable subclass runs the named command via a single-argument system($command), handing the whole string to /bin/sh -c, and copies the JSON's environment_variables into %ENV first - all with no opt-in gate (the GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLES check was added only in the fix). Reported by CPANSec with no public exploit identified at time of analysis and a low EPSS of 0.20%, but the code path is trivially reachable from the standard ADC flow via GOOGLE_APPLICATION_CREDENTIALS.
Command injection in H3C NX15 firmware V100R017 allows authenticated remote attackers to execute arbitrary OS commands via the `workMode` parameter in the `/api/esps` IPv6 WAN configuration endpoint, likely yielding root-level device takeover based on the published PoC repository name. A public proof-of-concept exploit is available on GitHub (E:P confirmed in the CVSS 4.0 vector), significantly lowering the skill bar for anyone who already holds administrative credentials. No vendor patch has been identified at time of analysis, and no CISA KEV listing exists, indicating no confirmed widespread active exploitation.
Command injection in H3C NX15 V100R017 allows authenticated remote attackers to execute arbitrary OS commands as root via the /api/esps management endpoint. The vulnerability exists in the Add function's handling of the esps.filter.url parameter, which is passed unsanitized to a system command (CWE-77). A public proof-of-concept exploit demonstrating root-level remote code execution is available on GitHub, elevating real-world risk beyond the theoretical - though exploitation requires high-privilege credentials, and no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
OS command injection in Lenovo XClarity Orchestrator (LXCO) 2.2.0 enables an authenticated low-privileged attacker to execute arbitrary operating system commands with elevated privileges under a specific, undisclosed circumstance. LXCO is an enterprise data center orchestration platform that manages Lenovo server and chassis infrastructure, making successful exploitation highly impactful to infrastructure availability, integrity, and confidentiality. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor patch is available via the Lenovo advisory.
Remote code execution in Flowise before 3.1.3 arises because its Pyodide Python-code validator (validatePythonCodeForDataFrame) can be defeated with Unicode homoglyph identifiers, letting an attacker run arbitrary Python that escapes the Pyodide sandbox and executes OS commands on the Flowise host with the process's privileges. The affected CSV Agent and Airtable Agent nodes gate LLM-generated (and config-supplied) Python through an ASCII word-boundary regex blacklist, which Python's NFKC identifier normalization silently rewrites back into the forbidden dunders. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the GitHub advisory documents a complete, reproducible bypass technique, so weaponization is straightforward; the vendor rates it 9.5 (CVSS 4.0).
Command injection in GL.iNet AX1800 router firmware up to version 4.8.3 allows a low-privileged authenticated remote attacker to execute arbitrary OS commands via the `remove_rule` RPC endpoint. The vulnerable parameter `args.id` in `/usr/share/gl-ngx/oui-rpc.lua` is passed unsanitized to a shell command, enabling full device takeover. No public KEV listing exists, but a proof-of-concept exploit is publicly available on GitHub, meaningfully lowering the barrier to exploitation.
Remote code execution in Flowise (flowise and flowise-components <= 3.1.2) is possible through the CSVAgent node, which executes user-supplied Python in a pyodide runtime. A regex denylist blocks imports and dangerous builtins, but attackers bypass it entirely by calling the pre-imported pandas library's read_pickle() to deserialize an attacker-controlled base64 pickle, achieving arbitrary command execution. A detailed working proof-of-concept (pickle __reduce__ gadget plus a custom file-like reader class to feed the payload) is published in the vendor GHSA advisory; publicly available exploit code exists, but there is no public exploit identified as being used in the wild and it is not in CISA KEV.
Unauthenticated remote code execution in Puwell IP Camera firmware versions 2.x through 4.x lets remote attackers achieve root-level control by sending a crafted JSON payload to an undocumented DebugShell service listening on TCP port 34567. Because the service performs neither authentication nor input sanitization, any attacker with network reach to the port can pass operating-system commands directly to the device, resulting in full compromise. Reported by VulnCheck with publicly available exploit code exists; no public evidence of active in-the-wild exploitation (not in CISA KEV).
Command injection in the Zyxel WAX650S Wi-Fi 6 access point firmware enables an authenticated administrator to execute arbitrary OS commands via the "export-cgi" CGI program. All firmware versions through 7.10(ABRM.4)C0 are affected, with full confidentiality, integrity, and availability impact on the device. No public exploit has been identified at time of analysis, and exploitation is gated behind administrator-level credentials, constraining real-world risk to insider threat or post-credential-compromise scenarios.
Command injection in GL.iNet GL-MT3000 router firmware (all versions through 4.4.5) allows unauthenticated remote attackers to execute arbitrary OS commands via the nas-web RPC wrapper's add_user function at /cgi-bin/glc. The vendor has confirmed the vulnerability exists following early disclosure, and a public proof-of-concept exploit is hosted on GitHub, materially lowering the barrier to exploitation. No patched firmware version is identified in the available data; the CVSS 4.0 score of 8.9 with E:P reflects unauthenticated network exploitability with a confirmed public exploit.
Command injection in GL.iNet GL-MT3000 firmware up to version 4.4.5 allows remote attackers to execute arbitrary OS commands through the `set_upgrade` function exposed via the `/cgi-bin/glc` CGI endpoint in `modem.so`. The CVSS 4.0 base score of 8.9 (with E:P reflecting public exploit availability) reflects high confidentiality, integrity, and availability impact on the affected device. A public proof-of-concept exploit has been disclosed on GitHub and the vendor has confirmed the vulnerability's existence, making this an active remediation priority for any network exposing the GL-MT3000 management interface.
Command injection in GL.iNet GL-MT3000 firmware up to version 4.4.5 exposes the device to full remote compromise through its modem management CGI endpoint. The vulnerable remove_profile function within modem.so accepts unsanitized input via /cgi-bin/glc, enabling arbitrary OS command execution without authentication. A public proof-of-concept exploit is hosted on GitHub, materially lowering the barrier for opportunistic exploitation; no vendor-released patch has been confirmed at time of analysis.
OS command injection in ClearOS 7.9's Log Viewer component allows authenticated attackers to execute arbitrary commands as the webconfig user and immediately escalate to full root access via default NOPASSWD sudo privileges. The vulnerable parameter (`filter`) in `File.php` is interpolated directly into a shell command without sanitization, making exploitation trivial once credentials are obtained. A public proof-of-concept exploit is available via lazytitan.ro and documented by VulnCheck; no CISA KEV listing is present, so confirmed widespread active exploitation has not been established at time of analysis.
Remote command injection in GL-iNet GL-MT3000 firmware (up to version 4.4.5) allows unauthenticated network attackers to execute arbitrary OS commands on the device by supplying a malicious public_key argument to the server.set_peer function exposed via the /cgi-bin/glc CGI endpoint of the WireGuard server native plugin (wg-server.so). The vendor has confirmed the vulnerability following coordinated disclosure, and a public proof-of-concept exploit is available on GitHub, materially lowering the barrier to exploitation. No publicly confirmed KEV-listed active exploitation is identified at time of analysis, though the combination of unauthenticated network access, high-impact command execution, and available POC makes this an urgent remediation priority for any deployment.
Remote command injection in the GL-iNet GL-MT3000 travel router (firmware 4.4.0-4.4.5) allows unauthenticated network-adjacent or internet-exposed attackers to execute arbitrary OS commands by supplying a maliciously crafted `private_key` argument to the WireGuard server public key generation endpoint at `/cgi-bin/glc`. The vendor has confirmed the vulnerability, and a public proof-of-concept exploit is available on GitHub, significantly lowering the barrier to exploitation. No active exploitation has been confirmed by CISA KEV, but the combination of PR:N attack profile and public POC warrants urgent remediation on any internet-exposed device.
Unauthenticated remote command injection in GL-iNet GL-MT3000 firmware (versions 4.4.0 through 4.4.5) allows network-adjacent or remote attackers to execute arbitrary OS commands by sending a crafted request to the /cgi-bin/glc CGI endpoint with a manipulated port argument passed to the s2s.enable_echo_server function. The vendor has confirmed the vulnerability, the CVSS 4.0 base score is 8.9 with full high-impact ratings across confidentiality, integrity, and availability, and a public proof-of-concept exploit is available on GitHub, materially lowering the exploitation bar. No public CISA KEV listing exists at time of analysis, but the combination of unauthenticated network access and a published PoC makes active exploitation a near-term realistic risk.
Remote command injection in GL-iNet GL-MT3000 firmware through version 4.4.5 allows unauthenticated network attackers to execute arbitrary OS commands via crafted package name input to the plugins.install_package or plugins.remove_package functions exposed through the /cgi-bin/glc CGI endpoint. The CVSS 4.0 vector confirms no authentication, no complexity barriers, and full confidentiality, integrity, and availability impact on the vulnerable system. A public proof-of-concept exploit is available on GitHub, no public exploit identified in CISA KEV at time of analysis, but the combination of unauthenticated network access and live exploit code makes this a high-urgency issue for any deployment with an internet-exposed management interface.
Remote command injection in GL.iNet GL-MT3000 routers (firmware 4.4.0-4.4.5) allows unauthenticated network attackers to execute arbitrary OS commands by supplying crafted shell metacharacters in the Hostname argument to the ovpn-client.get_recommend_config function exposed via the /cgi-bin/glc CGI endpoint. The vendor has confirmed the vulnerability's existence, and a public proof-of-concept exploit is hosted on GitHub, materially lowering the exploitation barrier. No public exploit identified as confirmed actively exploited (CISA KEV) at time of analysis, but the PR:N/UI:N posture combined with a live PoC makes opportunistic exploitation against internet-exposed travel routers a credible near-term risk.
OS command injection in Telenia Software TVox allows authenticated high-privilege attackers to execute arbitrary operating system commands via the unsanitized `pid` parameter in `action_audio.php`. Affected deployments span TVox 26.x through 26.5.3 and 24.x through 24.9.21, running on an Apache/PHP stack where successful exploitation yields command execution as the `apache` system user. A publicly available proof-of-concept exploit exists (KarmaInSecurity KIS-2026-15, confirmed by VulnCheck), though no CISA KEV listing is present, indicating active exploitation is not yet confirmed at scale.
OS command injection in OpenWrt's luci-app-dockerman grants any authenticated user holding only the read ACL full root-level code execution on the affected router. The vulnerable run_ttyd handler in the ucode docker_rpc.uc backend constructs a shell command from attacker-controlled request fields (id, cmd, uid) and passes them unsanitized to system() within the rpcd root context, reachable via a simple HTTP POST to /ubus. Only LuCI master and openwrt-25.12 snapshots after the JS-to-ucode backend conversion are affected; upstream patch commits exist but no released patched snapshot version was confirmed as of the advisory, and no public exploit is identified at time of analysis.
Remote command injection in GL.iNet GL-MT3000 router firmware (versions 4.4.0 through 4.4.5) allows unauthenticated network-reachable attackers to execute arbitrary OS commands by supplying a crafted filename argument to the ovpn-client.check_config function exposed via the /cgi-bin/glc CGI endpoint. The vendor confirmed the vulnerability's existence, and a public proof-of-concept exploit is published on GitHub (StrTzz123/iot_vul), materially lowering the bar for exploitation. The CVSS 4.0 score of 8.9 with exploit maturity E:P reflects a high-priority, real-world risk of complete device compromise with no authentication or user interaction required.
Command injection in the GL.iNet GL-MT3000 router's Network Lua RPC Plugin allows authenticated remote attackers to execute arbitrary OS commands by injecting shell metacharacters into the `switch` argument of the `network.switch_info` or `network.switch_status` RPC methods. Firmware versions 4.4.0 through 4.4.5 are confirmed affected, with the vendor acknowledging the vulnerability following coordinated disclosure. A public proof-of-concept exploit has been published on GitHub (E:P reflected in the CVSS 4.0 vector), no public exploit identified as confirmed actively exploited (CISA KEV), though the low complexity and available PoC materially lower the bar for exploitation.
Command injection in GL.iNet GL-MT3000 firmware versions 4.4.0 through 4.4.5 allows an adjacent, low-privileged attacker to execute arbitrary OS commands by manipulating the `record_size` argument in the `logread.set_config` RPC function of the Logread Lua plugin. A proof-of-concept exploit has been publicly released on GitHub, and the vendor confirmed the vulnerability exists following early disclosure. While not yet listed in CISA KEV, the combination of low attack complexity, public exploit code, and full high-impact confidentiality/integrity/availability compromise makes this a credible and actionable risk for any network where GL-MT3000 devices are deployed.
Remote command injection in GL.iNet GL-MT3000 router firmware (versions 4.4.0-4.4.5) allows an authenticated network attacker to execute arbitrary OS commands by manipulating the `module` argument of the `logread.get_system_log` RPC function in the Logread Lua plugin. The vendor confirmed the vulnerability following coordinated disclosure, and a public proof-of-concept exploit is available on GitHub. No publicly available exploit confirms CISA KEV-level active exploitation at time of analysis, though the combination of a PoC and a widely used consumer router creates meaningful opportunistic risk.
OS command injection in the Serverless-Devs CLI (@serverless-devs/s versions 3.1.11 and earlier) lets an attacker execute arbitrary commands on a developer's machine when they run 's init' with a crafted, attacker-influenced argument. The tool passes unsanitized input into child_process.spawn() with shell:true, and the single guard check - requiring the value to end in '.git' - is trivially satisfied by an attacker while still smuggling shell metacharacters. Publicly available exploit code exists (a proof-of-concept gist), SSVC rates technical impact as total and automatable, but EPSS remains low at 0.48% and it is not in CISA KEV.
Root-level OS command injection in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 lets attackers inject shell metacharacters into a parameter that is passed unsanitized to a system command, yielding arbitrary command execution as root. OpenMediaVault is a Debian-based network-attached-storage (NAS) management platform, and the -md plugin manages Linux mdadm software RAID arrays. Publicly available exploit code exists (a proof-of-concept gist is referenced), though there is no public exploit identified in CISA KEV; EPSS is modest at 0.62% (46th percentile).
Remote OS command execution in ArcadeDB before 26.7.2 is reachable by authenticated schema administrators through JavaScript trigger scripts, because ScriptTriggerExecutor grants sandbox access to the full java.lang.* package, allowing direct invocation of java.lang.Runtime.getRuntime().exec() or ProcessBuilder. Any account holding UPDATE_SCHEMA permission can create a trigger that fires OS commands server-side against the underlying host process. No public exploit has been identified at time of analysis, but SSVC rates the technical impact as total and the attack as automatable, and the GHSA advisory provides sufficient implementation detail to lower the barrier for capable threat actors.
Command execution in GitPython 3.1.50 arises because its default unsafe-option gate fails to recognize joined short-option syntax, letting an attacker who controls clone options smuggle -u<helper> (the short form of --upload-pack=<helper>) past the block on --upload-pack/-u. Applications calling Repo.clone_from with attacker-influenced multi_options and allow_unsafe_options=False are affected, allowing Git to execute an arbitrary helper command during clone despite the safety gate being active. Reported by VulnCheck with a working local proof-of-concept; publicly available exploit code exists, but there is no public exploit identified as used in active attacks and it is not in CISA KEV.
Command injection and arbitrary file overwrite in GitPython before 3.1.51 expose applications that pass attacker-controlled arguments to four public API methods. `Repo.archive()` and `git.ls_remote()` forward caller-supplied keyword arguments into the git argument vector without consulting GitPython's own unsafe-options denylist, enabling arbitrary command execution via options such as `--exec` or `--upload-pack`. `Repo.iter_commits()` and `Repo.blame()` accept unsanitized revision strings without a leading-dash check, so a value like `--output=/path/to/file` is interpreted by git as an option, truncating an arbitrary file. No public exploit code or CISA KEV listing was identified at time of analysis; a vendor-released patch is available in 3.1.51.
Poisoned-pipeline command injection in Wazuh's GitHub Actions CI/CD workflows (all revisions before commit 44bf114) lets an unauthenticated external attacker run arbitrary shell commands on the project's self-hosted runners by submitting a fork pull request containing a crafted VERSION.json. Because the JSON is read into environment variables that are interpolated verbatim into workflow run steps, shell metacharacters break out into command execution, permitting theft of CI secrets such as GITHUB_TOKEN and AWS credentials. There is no public exploit identified at time of analysis, but the technique (untrusted fork input on self-hosted runners) is well-understood and the vendor has already merged a fix.
Command injection in GitPython before 3.1.51 allows low-privileged attackers to bypass the `check_unsafe_options` blocklist by supplying abbreviated git option names that git's CLI resolves to dangerous long-options at runtime. This is an incomplete fix of CVE-2026-42215 (patched in 3.1.47): the guard canonicalizes only underscore-to-hyphen but does not model git's unambiguous long-option prefix abbreviation feature, so a kwarg like `upload_p` passes the blocklist unchanged yet arrives at git as `--upload-pack`, enabling arbitrary command execution. No CISA KEV listing or confirmed public exploit code was identified at time of analysis, though the GHSA advisory includes precise source code and sufficient technical detail to substantially lower exploitation barrier.
OS command injection in the VPN module of TP-Link Archer AXE75 V1 routers allows an adjacent, authenticated attacker with administrator-level access to achieve full device compromise by importing a specially crafted VPN client configuration file. Improper filtering of special characters (CWE-78) in configuration input permits injection of arbitrary OS commands, granting an attacker complete control over the device including configuration integrity, network routing, and service availability. No public exploit identified at time of analysis; vendor-released patch is available.
Command injection in the system.upgrade_check interface of multiple Cudy router models (TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600, WR6500) lets remote attackers run arbitrary commands as root via crafted input. Per the CVSS vector (PR:N/UI:N), no authentication or user interaction is required, and CISA SSVC marks the flaw as automatable with total technical impact. There is no public exploit identified at time of analysis, and the EPSS score is a moderate 1.21% (65th percentile).
OS command injection in pgAdmin 4 (all versions before 9.18) lets an authenticated user with the commonly-granted tools_import_export_data permission run arbitrary commands on the pgAdmin server host. The Import/Export Data tool renders a user-supplied query into a psql \copy (...) command line; its hand-written parenthesis-balance validator (_is_query_parens_balanced) wrongly assumes standard_conforming_strings=off, treating a backslash-quote (\') as an escaped quote, so a payload like SELECT 'a\') TO PROGRAM 'echo pwned' x' passes validation while real psql (scs=on, the default on PostgreSQL 13-18) closes the string early and executes an attacker-chosen TO PROGRAM clause via popen(). No CISA KEV listing and no standalone public exploit, but the fix commit's regression test discloses a fully working RCE payload; EPSS not provided.
Command injection in pgAdmin 4's MASTER_PASSWORD_HOOK feature exposes the pgAdmin service account to arbitrary OS command execution by any authenticated user whose identity originates from an external auth source (OAuth/OIDC, Kerberos, webserver headers). Affected deployments span versions 7.2 through 9.16, but only those with the hook configured to use the `%u` substitution token alongside an external IdP where usernames can be attacker-influenced. No public exploit code or CISA KEV listing exists at time of analysis; however, the commit diff publicly discloses the exact vulnerable code path, significantly lowering the barrier to independent exploit development.
Authenticated command execution affects several Hikvision wireless access points (DS-3WAP521-SI, DS-3WAP522-SI, DS-3WAP621E-SI, DS-3WAP622E-SI, DS-3WAP623E-SI, DS-3WAP622G-SI), where insufficient input validation lets an attacker holding valid device credentials send crafted packets carrying malicious commands to achieve arbitrary command execution on the device. The CVSS 3.1 vector (7.2, AV:N/AC:L/PR:H/UI:N) indicates a network-reachable but high-privilege (authenticated) attack with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; the vendor has published a security advisory.
Command injection in Advantech ADAM-3600 EdgeLink RTU controllers (versions prior to 2.8.5.1) lets remote attackers execute arbitrary operating-system commands by abusing the firmware upgrade file verification routine. The device fails to sanitize input consumed while validating an uploaded firmware image, so crafted content is passed to a shell context. No public exploit identified at time of analysis, and the EPSS score is low (0.14%), but the CVSS 9.8 rating and the device's role as an industrial edge controller make this a high-value target.
Root-level command injection in Cudy TR- and WR-series routers lets attackers run arbitrary OS commands through the ipsec_conn interface, which fails to sanitize user-supplied input before passing it to a shell context. Affected models span TR1200 (v2.4.15), TR3000 (v2.4.21), WR300 (v2.4.25), WR1200 (v2.4.23), WR1300 (v2.4.22), WR1500 (v2.3.10), WR3000 (v2.4.19), WR3600 (v2.3.16), and WR6500 (v2.3.15). No public exploit identified at time of analysis, and CISA SSVC records exploitation status as none; EPSS is modest at 1.21% (65th percentile), so this is a high-severity design flaw without evidence of widespread exploitation yet.
Command injection in Cudy TR1200 (firmware v2.4.15) and TR3000 (firmware v2.4.21) routers via the system.setclock interface enables an authenticated administrator to execute arbitrary OS commands with root privileges. The vulnerability stems from unsanitized input passed directly to a system command, yielding full device compromise - confidentiality, integrity, and availability all rated high. No public exploit or active exploitation (CISA KEV) has been identified; EPSS of 1.21% at the 65th percentile reflects moderate relative risk among disclosed CVEs but low absolute exploitation probability.
Command injection in Cudy's OpenWRT-based router firmware allows remote attackers to execute arbitrary commands as root through the system.setclock interface, affecting multiple TR- and WR-series models (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, WR6500 v2.3.15). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates unauthenticated network-based exploitation with total system compromise, and CISA's SSVC framework rates it Automatable with Total technical impact. No public exploit is identified at time of analysis and it is not in CISA KEV; EPSS is modest at 1.21% (65th percentile).
OS command injection in the IBM Hardware Management Console (HMC) lets a remote, unauthenticated attacker run arbitrary commands with elevated privileges on the management appliance. It affects HMC V10.3.1050.0 through 10.3.1064.0 and V11.1.1110.0 through 11.1.1112.0, the systems used to manage IBM Power servers (including Novalink deployments), stemming from improper validation of user-supplied input (CWE-78). No public exploit has been identified at time of analysis, but the network-reachable, no-authentication vector and 9.8 CVSS make this a top-priority patch.
Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.1 allows remote attackers to run arbitrary OS commands by injecting shell-control environment variables into the MCP (Model Context Protocol) stdio launcher. The DANGEROUS_ENV_VARS blocklist in src/lfx/src/lfx/base/mcp/util.py omits SHELLOPTS, BASHOPTS, and PS4, letting an attacker abuse Bash's xtrace behavior to execute commands when a stdio-based MCP server subprocess is spawned. Rated CVSS 9.8 with a network, no-privilege, no-interaction vector; a vendor patch is available, but no public exploit code or CISA KEV listing has been identified at the time of analysis.
Command injection in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.27 and 13.0.1.0-13.0.7.2) lets a remote attacker execute arbitrary OS commands by injecting CRLF characters that break the intended neutralization of command input. Rated CVSS 9.8 (network, no authentication, no user interaction) with total confidentiality, integrity, and availability impact; a vendor patch is available. There is no public exploit identified at time of analysis, and EPSS probability is modest at 0.50% (40th percentile).
Privilege escalation via OS command injection affects Eaton's Tripp Lite series PADM firmware (versions 0 through 20), where a low-privileged authenticated user can abuse a session management interface that improperly validates input to gain unrestricted device access. The flaw (CWE-78) carries a CVSS 8.8 and, because the affected PADM 20 line has reached end-of-life, there is no forthcoming firmware patch. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Command injection in Eaton's Tripp Lite Series PADM firmware (versions 0 through 20) lets an authenticated administrator run arbitrary operating-system commands through a session-management interface that fails to properly validate input, escaping the intended restricted command environment. The flaw carries CVSS 8.3 (CWE-78) and is notable because the affected firmware line is end-of-life, meaning no security updates are being produced. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so exploitation currently requires an actor who already holds administrative credentials on the device.
Remote code execution in Phoenix Contact CHARX SEC series EV charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 through before 1.9.1) allows an unauthenticated network attacker to inject commands into the system configuration that are subsequently executed with root privileges. The CVSS 4.0 base score of 9.3 reflects network-reachable, no-privilege, no-interaction exploitation with full confidentiality, integrity, and availability impact on the device. No public exploit identified at time of analysis, but the vendor (via CERT@VDE) has released a patched version.
Local privilege escalation in Phoenix Contact CHARX SEC EV charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 up to 1.9.1) allows a low-privileged local user to execute arbitrary commands as root through a vulnerable init-script for user-applications, yielding full system compromise. Reported by CERT@VDE and classified as OS command injection (CWE-78), the flaw carries a CVSS 4.0 base score of 8.5 (local vector, low privileges required). A vendor patch (1.9.1) is available; no public exploit identified at time of analysis.
Privilege escalation in Phoenix Contact CHARX SEC electric-vehicle charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 up to but excluding 1.9.1) lets a low-privileged local user inject and run arbitrary OS commands as root through the device's system configuration handling, yielding full compromise of the charging controller. The flaw is a CWE-78 OS command injection reported by CERT@VDE (advisory VDE-2026-008), and a vendor patch is available in version 1.9.1. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
OS command injection in Phoenix Contact CHARX SEC EV charging controllers allows an unauthenticated remote attacker who controls the OCPP backend (reached via a firewall-bypass) to execute arbitrary commands as the limited charx-oa user, potentially interrupting vehicle charging. It affects CHARX SEC-3000, SEC-3100, SEC-3050 and SEC-3150 versions 1.0.0 up to but not including 1.9.1, and is fixed in 1.9.1. There is no public exploit identified at time of analysis, and the CVSS 4.0 base score is 8.8 (High).
Local privilege escalation in the Phoenix Contact CHARX SEC EV charging controllers (SEC-3000/3050/3100/3150, firmware 1.0.0 through 1.9.0) lets the low-privileged local account 'charx-web' inject and run arbitrary OS commands as root via the udhcpc DHCP client, yielding full device takeover. The flaw is a CWE-78 OS command injection reported by CERT@VDE, and a vendor patch (1.9.1) is available. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local privilege escalation in Phoenix Contact CHARX SEC-3000/3050/3100/3150 EV charging controllers (firmware 1.0.0 through versions before 1.9.1) lets a low-privileged local user inject OS commands through a network-configuration script and gain root, yielding full device compromise. The flaw is a classic CWE-78 command injection reachable by any authenticated local account (CVSS 4.0 8.5). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Local privilege escalation in Phoenix Contact CHARX SEC electric-vehicle charging controllers (SEC-3000/3050/3100/3150, versions 1.0.0 through 1.9.0) lets a low-privileged local user inject OS commands via the user-application init-script and execute them as root, yielding full device compromise. The flaw was reported by CERT@VDE and is fixed in firmware 1.9.1; no public exploit has been identified at time of analysis, and it is not listed in CISA KEV. EPSS data was not provided, so widespread automated exploitation cannot be confirmed.
Local privilege-relevant command injection in Performance Co-Pilot's (PCP) linux_sockets PMDA lets an authenticated user inject shell metacharacters through the network.persocket.filter metric, causing arbitrary commands to run as the PMDA user each time metrics refresh. Reported by Red Hat, it affects the pcp packages shipped across Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
OS command injection in dnsmgr version 2.15 and earlier lets an attacker execute arbitrary commands through the ping function in CheckUils.php, which passes unsanitized input into a system shell call (CWE-77). SSVC rates the technical impact as total and marks exploitation as proof-of-concept, so publicly available exploit code exists, though it is not on CISA KEV and EPSS is low (0.15%). The published CVSS is 9.8, but note the description characterizes the attacker as 'local' while the CVSS vector encodes AV:N - this discrepancy affects real-world exposure and should be resolved against the target deployment.
Root-level command injection in the net.set_wan interface of multiple Cudy router models (TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600, WR6500) allows attackers to execute arbitrary OS commands as root by supplying crafted input to WAN configuration parameters. The NVD-assigned CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) rates this 9.8 Critical, implying full network-reachable compromise with no privileges required. No public exploit code and no CISA KEV listing were identified at time of analysis, so there is no public exploit identified at this time; the vendor has published security advisory cudy-sa-26-7-jezzy-4.
Arbitrary OS command execution is possible in IBM Aspera Faspex 5 (versions 5.0.0 through 5.0.15.4) through unquoted shell interpolation, allowing a remote attacker who has already obtained high-privilege authentication to run arbitrary commands on the underlying host. The CVSS vector (AV:N/AC:L/PR:H) confirms network reachability with low attack complexity once authenticated, resulting in full confidentiality, integrity, and availability compromise. No public exploit code or CISA KEV listing has been identified at time of analysis; IBM has released a patch via the advisory at https://www.ibm.com/support/pages/node/7280530.
Shell command injection in IBM Aspera Faspex 5 (versions 5.0.0 through 5.0.15.4) permits a remote attacker holding high-privilege credentials to execute arbitrary operating system commands on the underlying server. The CVSS 7.2 High score reflects full confidentiality, integrity, and availability impact, substantially gated by the PR:H authentication requirement. No public exploit has been identified at time of analysis, and both EPSS (1.04%, 60th percentile) and CISA SSVC (Exploitation: none) align on low current exploitation activity; a vendor patch is confirmed available.
Authenticated OS command injection in ELECOM WAB series routers and access points allows authenticated attackers to execute arbitrary OS commands via the Restore Settings function. Full device compromise is possible, but no active exploitation or public exploit code is known at this time. The vulnerability is rated high severity (CVSS 8.6) but requires administrative credentials to exploit.
Authenticated OS command injection in ELECOM wireless LAN routers and access points allows an attacker with administrative credentials to execute arbitrary operating system commands on the device. Exploitation requires logging into the product's WebUI; no public exploit or active exploitation has been reported at this time. The vulnerability is confirmed by the vendor and JPCERT/CC, with a CVSS 4.0 score of 8.6 (High).
OS command injection in NVIDIA NeMo for Linux allows a local authenticated attacker to execute arbitrary commands, leading to full system compromise (code execution, privilege escalation, data tampering, and information disclosure). No public exploit code or active exploitation has been identified at the time of analysis.
Command injection vulnerability in VeloCloud Orchestrator (VCO) on-premises allows unauthenticated remote attackers to access internal functionality and fully compromise the host system, impacting data managed by the orchestrator. This issue is known to be actively exploited. Hosted and Dedicated VCO versions have been pre-emptively patched.
OS command injection in the backup-restore functionality of Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated administrator to execute arbitrary operating-system commands on the appliance, resulting in complete system compromise (CWE-78, CVSS 8.4). Exploitation requires a high-privilege session (PR:H) and adjacent-network reachability to the management interface (AV:A), where a crafted or manipulated backup causes shell metacharacters to be interpreted by the OS command the restore process runs. No public exploit code has been identified at time of analysis, CISA's SSVC assessment records exploitation as 'none' and not automatable, and EPSS is low at 0.72% (50th percentile); Progress has published patched builds for all affected products.
OS command injection in Progress LoadMaster and related products allows authenticated high-privilege attackers to execute arbitrary operating system commands via the Geo Location management interface, resulting in complete system compromise. Affected products include LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF. No public exploit or active exploitation was identified at the time of analysis.
OS command injection in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges and adjacent network access to execute arbitrary commands through the management interface, leading to full system compromise. No active exploitation or publicly available exploit has been reported at the time of analysis.
Command injection in NoteGen before 0.32.0 allows remote code execution when an attacker can execute JavaScript in the application webview. The default Tauri shell plugin capability permits execution of bash, python, and python3 with arbitrary arguments, enabling the webview to run OS commands with the app's privileges, typically leading to full host compromise via cross-site scripting.
Remote code execution in Catalyst::View::Wkhtmltopdf before 0.6.1 allows unauthenticated attackers to inject arbitrary shell commands via unsanitized PDF render options such as page_size, orientation, or margins. The incomplete fix in 0.6.0 still permits injection. CVSS 9.8, EPSS 0.67% (moderate probability), CISA SSVC indicates automatable and total impact, but no active exploitation reported.
We are tasked to synthesize data about CVE-2026-65711 into a JSON object. We must use all provided data: description, CVSS (especially the CVSS:4.0 vector, note this is CVSS 4.0 not 3.1), EPSS, KEV (not mentioned, assume no KEV), POC (publicly available), CPE, tags, SSVC, ENISA references. We need to output each field as a plain text string, not array/object. First, parse the data: - Description: sysPass through version 3.2.11 contains OS command injection, authenticated admins can set malicious backup path, the FileBackupService builds a tar command via string concatenation with siteBackupPath without escapeshellarg(), passing to exec(). Injected commands persist and execute on every backup trigger. - CVSS Score: 8.6 (note this is likely a CVSS 4.0 score, not 3.1). Provided vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Interpretation: Network attack vector, Low attack complexity, No attack requirements, Privileges Required High, No user interaction, Vulnerable component confidentiality high, integrity high, availability high, subsequent system none. Environmental metrics all X (not defined). So base score 8.6 is derived from those base metrics. - CWE: CWE-78 (OS Command Injection). - Multi-source: EPSS: 2.41% (percentile 82%): This is relatively high, indicating a moderate likelihood of exploitation in next 30 days. Percentile 82% means it's higher than 82% of all CVEs. POC/Exploit: Publicly available (so there is a PoC). Reported by: VulnCheck. CPE: cpe:2.3:a:nuxsmin:syspass:*:*:*:*:*:*:*:* (all versions up to 3.2.11) Tags: Command Injection, Syspass. SSVC: Exploitation: poc, Automatable: no, Technical Impact: total. (So SSVC says PoC exists, not automatable, total technical impact.) ENISA EUVD ID: EUVD-2026-48717, affected versions: sysPass 0 ≤3.2.11. References: - gist.github.com (exploit) - vulncheck advisory - NVD detail No KEV mentioned. So it's not in CISA KEV. So exploitation status: publicly available exploit code exists, but not confirmed actively exploited by CISA. We must produce a comprehensive analysis with all fields. Now for each field: 1. product_name: "sysPass" (3 words? Actually one word, it's the product name) 2. summary: 2-3 sentence plain-language. Start with impact verb and product. "Authenticated OS command injection in sysPass 3.2.11 allows administrators to execute arbitrary commands..." but we need to incorporate all data. Mention that it's authenticated, the mechanism (backup path), EPSS moderate, PoC exists. Not KEV, but publicly available PoC. So: "Authenticated command injection in sysPass up to version 3.2.11 permits administrators with configuration privileges to execute arbitrary OS commands by setting a crafted backup path. The vulnerability resides in FileBackupService's unsanitized string concatenation when building a tar command, allowing injected commands to persist across backup runs. Exploit code is publicly available, and EPSS indicates a 2.41% exploitation probability (82nd percentile)." 3. technical_context: Explain underlying technology: sysPass is a PHP-based password manager. The backup functionality uses PHP exec() to call tar, constructing the command by directly concatenating the user-supplied path. The CWE-78 is OS command injection. Use CPE to identify affected product: cpe:2.3:a:nuxsmin:syspass:*:*:*:*:*:*:*:* (all versions). Root cause is lack of escapeshellarg() or similar sanitization before passing to exec(). 4. risk_assessment: Use CVSS 4.0 vector: AV:N, PR:H, AC:L, UI:N, High impact on confidentiality, integrity, availability. So it's a high-privilege, network-accessible command injection. EPSS 2.41% suggests moderate real-world exploit probability. SSVC: exploitation: PoC (public exploit), not automatable, total technical impact. So risk: It's a critical vulnerability if an admin account is compromised, but it requires high privileges, which limits attack surface unless there is another way to gain admin access. Note: CVSS score 8.6, but PR:H. So it's not a remote unauthenticated RCE; it's post-authentication. However, if admin accounts are weak or another vulnerability grants access, it's severe. The SSVC "not automatable" might indicate it's not easily scripted, but PoC exists, so manual exploitation is possible. The high score is justified given total compromise. Contrast: EPSS moderate, not extremely widespread. We'll say: While CVSS base score is high (8.6), the requirement for administrative privileges significantly reduces the risk in environments with strong admin credential management. The publicly available PoC increases urgency for patching. 5. affected_products: "sysPass versions up to and including 3.2.11 are affected. The product is identified by CPE cpe:2.3:a:nuxsmin:syspass:*:*:*:*:*:*:*:*. Vendor advisory available at VulnCheck (link)." 6. remediation: Vendor-released patch? The description says "through version 3.2.11" implying that version is vulnerable, but no mention of a fix version. The references are an exploit gist and a VulnCheck advisory. No mention of an official patch. So no vendor patch identified? But we should check: The CVE was assigned, maybe a fix is in a later version. Since the description says "through version 3.2.11", maybe 3.2.12 or 3.3.0 exists? We have no data. So we must state: No official patched version confirmed. Workaround: Since the injection is via backup path set by admin, a compensating control: restrict admin access to trusted users only; disable backup functionality if not needed; implement input validation at web application firewall (WAF) to block command injection patterns in the backup path parameter. However, the description says the path is admin-configurable, so likely only admins can set it. So limiting admin accounts is key. If patch not available, maybe monitor. But it's better to say: Upgrade to a patched version once released. As of analysis, no patched version identified. Use network segmentation to restrict access to the sysPass admin interface. 7. exploit_scenario: An attacker who obtains administrative credentials (via phishing, brute force, or another vulnerability) logs into the sysPass admin panel, navigates to the backup settings, and sets the backup path to a value like "/tmp/backup; id > /tmp/pwned". When a backup is triggered (automatically or manually), the injected command executes as the web server user, leading to full command execution and potential lateral movement. 8. exploitation_conditions: Specific conditions: The attacker must have administrative privileges to configure the backup path. The backup functionality must be enabled and triggered (manually or via scheduled task). No other special conditions: the vulnerability exists in the default code path when processing backups. The attack is remote (network), requires authentication as an admin (PR:H), no user interaction beyond setting the malicious path. So: "Requires administrative authentication to sysPass; the backup feature must be enabled and triggered. No additional non-default configurations are required." 9. attack_chain: Using kill chain, we have a 4-step: Access (obtain admin credentials or session) → Exploit (set malicious backup path via admin interface) → Execution (trigger backup, injecting command) → Impact (execute arbitrary OS commands as web user). So: "Gain administrative access to sysPass → Set malicious backup path in settings → Trigger backup operation → The injected OS command executes via exec()" Actually, the injection persists, so it's: "Gain admin access → Inject command in backup path → Wait for or trigger backup → Execute arbitrary commands". But the chain can be: "Authenticate as admin → Navigate to backup configuration → Insert shell metacharacters into backup path → Save configuration → Trigger backup → Execute command". For brevity, we can combine. So: "Obtain admin credentials → Set backup path to include command injection → Initiate backup → Malicious command executes as web server user". That's 4 steps. It's a simple chain. 10. confidence_notes: Based on data: CVE assigned, VulnCheck advisory confirms vulnerability, exploit PoC publicly available. CVSS vector provided by NVD/NIST? Actually the CVSS vector came with the data, likely from NVD. So confirmed by NVD. Patch status unknown; no official fix version mentioned. The CVE description states "through version 3.2.11" so likely later versions may patch it but not confirmed. So: "Vulnerability confirmed by NVD and VulnCheck advisory. Public PoC exploit exists. No patched version identified in available data." 11. prevalence: sysPass is a self-hosted password manager, not as widely deployed as commercial alternatives. It's likely used by small to medium organizations or individuals. So prevalence: low? Possibly medium? It's an open-source project, some enterprise use but not ubiquitous. I'd say low. However, the SSVC says "not automatable" and EPSS 2.41% indicates some scanning? I'll estimate low. But prevalence basis: "open-source password manager, niche deployment". Could be medium if commonly used, but compared to WordPress or Apache, it's low. So "low". 12. prevalence_basis: "self-hosted password manager, modest community adoption". Short. 13. assessed_cvss_vector: We need to produce our own CVSS 3.1 base vector. The provided CVSS is 4.0. We can map the 4.0 base metrics to 3.1 as best we can. CVSS 4.0 has AV:N, AC:L, AT:N, PR:H, UI:N, VC:H, VI:H, VA:H. The 3.1 equivalents: AV:N, AC:L, PR:H, UI:N, S:C? Wait, in CVSS 4.0, scope is not explicitly present; instead we have vulnerable and subsequent system metrics. The attack vector is network, complexity low, privileges high, user interaction none. For scope: in CVSS 4.0, high impact on vulnerable system, low on subsequent. But in 3.1, scope is determined by whether the vulnerable component and impacted component are the same. Here, the vulnerability is in the web application (the vulnerable component) and execution happens on the same machine, so likely the vulnerable component and the impacted component are the same. However, it might be argued that the vulnerable component is the web app, and the impact is on the underlying OS, which is a different component. Typically for command injection in web apps, CVSS 3.1 sets Scope: Changed if the web app's security context is different from the OS command. Many CVSS 3.1 vectors for command injection use S:C. But we need to be consistent. The provided 4.0 set SC:N means subsequent system (after scope change) has no impact? Wait, no: In CVSS 4.0, VC:Vulnerable component confidentiality, VI, VA are high. SC: Subsequent system confidentiality, integrity, availability are all N. This means the vulnerable component (web app) suffers high impact, while the subsequent system (maybe the OS) has none? That doesn't make sense for OS command injection. The CVSS 4.0 user guide says: Vulnerable component is the thing that contains the vulnerability; Subsequent system is the component that suffers the impact if it's different. Here, the vulnerable component is the web application (sysPass). The impact is on the OS where commands are executed. If the web app and OS are considered separate, then the vulnerable component (web app) might have no confidentiality, integrity, availability impact because the exploit doesn't alter the web app itself, but rather the OS. But the injection lets an attacker execute commands as the web server user, which could read files (confidentiality), modify files (integrity), or disrupt service (availability) on the OS. The web app's own data may be accessible too. I think traditional CVSS 3.1 would set Scope Changed and impact on the OS as the target, with Conf/Integ/A
Authenticated administrators can execute arbitrary OS commands on Microweber CMS through 2.0.20 by injecting unsandboxed Twig expressions into mail templates. The vulnerability allows full server compromise once an admin injects a payload, which auto-executes on every mail dispatch event. Public exploit code exists, though no active exploitation is confirmed.
Arbitrary OS command execution in OpenStack Ironic Python Agent (IPA) through version 11.6.0 lets a project-scoped user holding the manager role run attacker-chosen commands on a running IPA ramdisk by supplying a crafted ntp_server value that is passed unsanitized to a shell. Because IPA drives bare-metal provisioning, code execution occurs in the privileged provisioning agent context, enabling full compromise of the node being managed. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Remote unauthenticated code execution in 9router 0.4.59 (by decolua) lets an attacker chain three flaws - a hardcoded default password (123456) accepted on any fresh install, a Host-header spoof that defeats the LOCAL_ONLY network gate, and unsanitized arguments reaching child_process.spawn() during MCP plugin registration - to run arbitrary OS commands on the host. The issue is fixed in 0.4.60, was reported by VulnCheck, and carries a CVSS 4.0 base score of 9.4; no public exploit identified at time of analysis, though the advisory describes a directly reproducible attack path.
OS command injection in gpsd's gpsprof profiling utility (through release-3.27.5) lets an attacker who controls GPS input inject shell commands via the SKY.satellites[].used field. The value is written unsanitized into a gnuplot heredoc, so a crafted used value containing the heredoc terminator EOD closes the data block early and appends gnuplot system() calls that execute as the user running gpsprof in polar mode. No public exploit identified at time of analysis; the flaw is code-execution class (CWE-94) with a CVSS 4.0 base score of 8.5.
Remote code execution in Zohocorp ManageEngine ADAudit Plus (all builds before 8606) allows unauthenticated attackers to run arbitrary OS commands by abusing the product's agent API, which fails to sanitize input passed to a shell (CWE-78). Rated CVSS 10.0 by the vendor with a scope-changing vector, the flaw requires no privileges or user interaction and reaches the network-exposed agent communication channel directly. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the maximal severity and unauthenticated nature make it a high-priority patch for any exposed deployment.
Local privilege-relevant OS command injection in pardus-update (the update manager component of the Turkish national Debian-based distribution Pardus) affects versions 0.6.6 up to but not including 0.7.0, allowing an authenticated local user to inject and execute arbitrary operating system commands via improperly neutralized special characters. Because update tooling typically runs with elevated privileges, successful exploitation can yield full confidentiality, integrity, and availability compromise of the host. Reported by Turkey's national CSIRT (TR-CERT); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
OS command injection in MongoDB Compass allows an attacker to smuggle a malicious 'browser open command' for the OIDC authentication flow into an importable connection file, a setting normally restricted to global Compass application settings and not editable through the connection form. When a victim imports the crafted connection and initiates OIDC authentication, the attacker-controlled command executes on the victim's host with the user's privileges. No public exploit identified at time of analysis, but the CVSS 4.0 base score is 8.4 (High) reflecting full compromise of confidentiality, integrity, and availability of the local system.
Command injection in the Ansible Lightspeed extension for Visual Studio Code lets a crafted project achieve arbitrary code execution on a developer's machine. The extension's ansible.python.activationScript setting is treated as a shell command rather than validated as a file path, so when a victim opens or runs a malicious repository, attacker-controlled content in that setting executes with the privileges of the VS Code process. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Arbitrary code execution in the Visual Studio Code Ansible Lightspeed extension lets an attacker embed shell metacharacters in an Ansible playbook filename that the AnsiblePlaybookRunProvider passes unsanitized to a command invocation. When a developer opens the malicious project and runs the playbook, the injected characters execute arbitrary commands with the privileges of the VS Code user. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the local high-impact profile (CVSS 7.8, C:H/I:H/A:H) makes it a meaningful supply-chain/repository-poisoning risk for Ansible developers.
Local code execution in the Visual Studio Code Ansible (Lightspeed) extension lets a malicious project run arbitrary shell commands on a developer's machine by abusing the ansible.executionEnvironment.containerOptions and volumeMounts settings, which fail to sanitize shell separators (CWE-78). Because these are workspace-scoped settings, simply opening a booby-trapped repository can auto-trigger execution during Language Server initialization, yielding code execution as the VS Code user. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV; CVSS is 7.8 (High).
OS command injection in the SMASH (Systems Management Architecture for Server Hardware) service of Supermicro X14DBG-DAP and X14DBI platforms lets an authenticated attacker inject operating-system commands through SMASH's input handling on the Baseboard Management Controller (BMC). Successful exploitation yields arbitrary code execution on the BMC, enabling data-integrity tampering or a denial-of-service of the management controller. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
OS command injection in Autel MaxiCharger Single EV charging stations (firmware through V1.03.51) lets a malicious or compromised OCPP backend server inject arbitrary operating-system commands via the diagnostics URL parameter of an OCPP GetDiagnostics request. A rogue or hijacked charge-point management server can fully compromise the charger, and publicly available exploit code exists (CyberDanube), though no active exploitation has been confirmed. Because the impact reaches the underlying OS with full confidentiality, integrity, and availability loss, successful attacks give complete control of the charging hardware.