Command Injection
Monthly
Authenticated delegated LuCI sessions that hold the luci-app-advanced-reboot read ACL can execute arbitrary commands as root on affected OpenWrt routers, because that read ACL grants rpcd file.exec permission for the general shell interpreter /bin/sh and passes caller-controlled parameters to it. Only builds that actually ship this /bin/sh exec grant prior to version 1.1.2-6 are vulnerable; the vendor explicitly states the checked openwrt-24.10 and openwrt-23.05 branches do not carry the grant and are not affected by this chain. Exploitation requires a valid low-privilege delegated rpcd/LuCI session (CVSS vector PR:L, no unauthenticated path), and no public exploit code was identified at time of analysis; the issue is fixed in 1.1.2-6.
Authenticated command injection in KubeEdge (1.21.0 up to 1.21.2, 1.22.2, and 1.23.1) lets a principal holding Kubernetes RBAC rights to create or modify ConfigUpdateJob resources inject shell metacharacters into the updateFields passed to the keadm config-update command, which the edge taskmanager then runs through a system shell, yielding arbitrary command execution on the enrolled target edge node with the privileges of the KubeEdge process. The vendor rates this 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), and our independent assessment is slightly more severe because compromise of the node process is a scope change (S:C); the PR:L vector confirms the attacker must be authenticated and authorized, so this is not anonymous or remotely unauthenticated abuse. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, but the flaw is a genuine, actionable CWE-78 issue rather than an inflated score, and it is fixed in KubeEdge 1.21.2, 1.22.2, and 1.23.1.
Arbitrary command injection on Windows in the Perl distribution Email::Sender (Email::Sender::Transport::Sendmail versions before 2.602) lets an attacker who controls a From, To, or Cc header address execute commands as the sending process, because on MSWin32 the envelope sender and recipients are concatenated into a single command string that Perl's open() hands to a shell. The flaw is strictly Windows-only: on every other platform the transport uses open()'s list form and passes arguments directly to sendmail with no shell involved, so the injection path does not exist there, and exploitation additionally requires that the application use the sendmail transport rather than the SMTP transport and that the caller supply no explicit envelope (letting Email::Sender::Simple derive addresses from headers). The vendor CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N) overstates real-world risk given that hard platform gate; our assessment uses CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, EPSS is low at 0.22% (13th percentile), SSVC records no observed exploitation with automatable attack and total technical impact, and no public exploit code was identified at time of analysis, though a vendor patch (2.602) and an upstream commit are public.
Shell command injection in KubeEdge's v1alpha2 NodeUpgradeJob upgrade workflow allows an authenticated user who holds RBAC permission to create or update NodeUpgradeJob resources to run arbitrary commands on targeted edge nodes with the privileges of the edge upgrade process. Affected deployments are those running KubeEdge 1.12.0 through 1.21.1, 1.22.0/1.22.1, or 1.23.0 that actually process node-upgrade tasks; the vulnerability is high-priority and genuine rather than a CVSS-inflated finding, but it is gated on the NodeUpgradeJob create/update privilege (PR:L, not anonymous) so it is not reachable by unauthenticated users or on clusters that do not grant that permission. No public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS/KEV data were not supplied for this CVE. Vendor-released patches exist in 1.21.2, 1.22.2, and 1.23.1.
OS command injection in ntopng prior to 6.7.260717 allows an authenticated non-administrator user to run arbitrary operating-system commands as the ntopng process account, because the vulnerability-scan REST endpoints accepted the scan_ports parameter without an administrator check and passed it through a validator that still permits shell metacharacters. Exploitation requires nmap to be present on the host, and a secondary no-credentials path exists: the affected endpoints accept GET requests while ntopng's CSRF validation only covers POST bodies, so a logged-in victim's browser can be induced to trigger the command. The vulnerability is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H); no public exploit code or KEV-listed active exploitation was identified at time of analysis, and the issue is fixed in 6.7.260717.
OS command injection in Dassault Systèmes Tuleap Enterprise Edition versions 17.3 through 17.5 allows an authenticated remote attacker with a low-privilege account to execute arbitrary operating system commands on the server, as indicated by CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H and a base score of 8.8. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the potential for full server compromise makes this a genuine high-priority issue that is not a drop-everything emergency. Instances are only affected if they run versions 17.3-17.5 and permit low-privilege authenticated access, so environments with tightly controlled account provisioning or network restrictions face reduced exposure.
Authenticated callers holding only a write role in a single namespace can execute arbitrary commands on the host running Temporal Server's Worker Service, because the built-in `subprocess` compute provider derives the program name and argument vector from caller-supplied compute provider configuration instead of operator configuration, and the configuration handler invokes it immediately after spec validation with no scaling decision or task arrival required. Deployments are affected when running Temporal Server 1.31.0 through 1.31.2 with the Worker Service active and the per-namespace dynamic config `workercontroller.compute_providers.enabled` either unset (the default, in which case the allowlist check is skipped entirely) or explicitly containing `subprocess`; authentication with a namespace write role is required (CVSS vector PR:L), and a deployment with no authorizer is already fully open rather than being a special case of this flaw. Since the Worker Service process holds persistence credentials for every namespace in the cluster plus the cluster TLS material, successful exploitation reaches beyond the caller's namespace to the cluster as a whole, making this a genuine high-priority issue rather than CVSS inflation. Vendor patches are available in releases 1.31.3 and 1.32.0, and no public exploit was identified at time of analysis.
Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) lets remote attackers execute arbitrary shell commands on the device through the /www/cgi-bin/network_tools CGI diagnostic endpoint by supplying crafted param, key, or val arguments. The vendor CVSS 4.0 vector (9.3) rates this remote, unauthenticated, and requiring no user interaction, and publicly available exploit code exists; the vendor was contacted early but never responded, so no fix is available. Any deployment that exposes the router's web management interface to an untrusted network is at risk of full device compromise.
Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows an authenticated attacker who can reach the web management interface to run arbitrary shell commands on the device by manipulating the QUERY_STRING argument processed by restore.cgi in the Backup Restore component. The flaw is network-reachable, requires only low privileges (CVSS PR:L) with no user interaction, and produces high confidentiality, integrity and availability impact - on embedded routers this typically equates to root-level control of the device's OS. Publicly available exploit code has been released and the vendor did not respond to the disclosure, so no patch is available; the CVE is not listed in CISA KEV, meaning active exploitation has not been confirmed.
Command injection in the Netcore NBR200V2 router's firmware upgrade CGI endpoint (/www/cgi-bin/upgrade) allows authenticated administrative attackers to execute arbitrary shell commands by manipulating the QUERY_STRING parameter. The flaw affects firmware version 1.3.241127.071246, and publicly available exploit code exists. The vendor did not respond to disclosure, so no official fix is available; exploitation requires reaching the admin interface, which is typically LAN-only unless remote management is enabled.
Command injection in CrossWire Xiphos 4.3.2 and earlier lets a local attacker execute arbitrary shell commands with the privileges of the user running the application by placing shell metacharacters in data that Xiphos later interpolates into unsanitized popen() shell pipelines. Two code paths are involved: the personal-commentary rename action (on_rename_perscomm_activate in src/gtk/menu_popup.c), where the module section name is spliced into a cd/sed command, and the separate-image viewer (show_separate_image in src/main/url.cc), where an image filename is spliced into an external viewer's command line. Exploitation requires the victim to trigger one of those actions on attacker-supplied data (a crafted module or image file), the impact is confined to the victim's own account because no privilege escalation is demonstrated, and publicly available exploit code exists (SSVC records exploitation as 'poc'), although the issue is not in CISA KEV and EPSS is low at 0.15% (5th percentile).
Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows an attacker holding low-privilege credentials on the device's management interface to execute arbitrary operating-system commands by supplying a crafted ipv4 value to the LAN IP Configuration Handler in /usr/bin/network_tools. Rated CVSS 4.0 8.6 (assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N/C:H/I:H/A:H), the flaw yields full confidentiality, integrity and availability impact on the device and can pivot toward the surrounding network; publicly available exploit code exists, so weaponization effort is low, though no CISA KEV entry confirms active exploitation at time of analysis. Exploitation requires authenticated or at least low-privileged access to the management interface and is realistically reachable from the local network (and only from the internet if the admin interface is exposed), which materially narrows exposure compared with an unauthenticated flaw.
Authenticated command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows a low-privileged user of the web management interface to execute arbitrary shell commands on the device through the Traceroute Diagnostic Feature. The flaw is rooted in the 'url' argument passed to /usr/bin/network_tools, which is consumed without shell sanitization (CWE-77); because the underlying binary runs on an embedded Linux platform, successful exploitation typically yields root-level code execution, giving the attacker full control of the router (CVSS 4.0 base 8.6, AV:N/AC:L/PR:L/UI:N with High confidentiality, integrity and availability impact). Publicly available exploit code exists (a public disclosure write-up is referenced), and the vendor was contacted but did not respond, so no vendor-released patch has been identified at time of analysis. Exploitation is not confirmed as active in the wild (not listed in CISA KEV), but requires only network reachability to the management interface plus a valid low-privilege account.
OS command injection in getID3 versions before 1.9.26 allows an attacker who controls the filename passed to the library's shell-out handlers to execute arbitrary operating-system commands with the privileges of the embedding process. The vulnerable code paths build shell command lines around filenames using simple double quotes instead of escaping them, and they are reached through the shorten audio analyzer (module.audio.shorten.php) and the Vorbis comment / MetaFLAC write helpers (write.vorbiscomment.php, write.metaflac.php). Practical exposure is constrained: the host application must call those write or shorten routines and must have the vorbiscomment, metaflac, or shorten helper binaries installed and on GETID3_HELPERAPPSDIR or PATH, and low-privilege access to the embedding application is required per the vendor vector; the flaw is fixed in 1.9.26, and no public exploit code has been identified at time of analysis.
OS command injection in the D-Link R95 (BE9500) router running firmware BE9500_1.00.16 allows an attacker to execute arbitrary operating-system commands on the device by supplying a crafted NTPServer argument that the /bin/ssi binary handles on behalf of the DHMAPI component. Exploitation requires reaching and authenticating to the router's management interface (PR:H in both the CVSS 4.0 vector and our independent CVSS 3.1 assessment), so this is a post-authentication flaw that becomes dangerous when admin credentials are default, weak, or reused. Publicly available exploit code exists (a public GitHub proof-of-concept), but no CISA KEV entry confirms active exploitation; the vulnerability scores 8.5 High under CVSS 4.0, driven by full confidentiality, integrity, and availability impact on the device.
OS command injection in the Totolink A3002MU router firmware (build Hh-B20211125.1046) lets a remote attacker who holds valid low-privilege credentials execute arbitrary shell commands on the device through the formWsc handler in /boafrm/formWsc by supplying a crafted localPin argument. Because the affected component is the router's BOA web management service, successful exploitation yields full compromise of confidentiality, integrity and availability (CVSS 4.0 score 8.6, PR:L, no user interaction), and on consumer routers the required low-privilege session is often trivially satisfied by unchanged default administrative credentials. Publicly available exploit code exists (a published proof-of-concept walkthrough for the A3002MU rce-formWsc path), and although there is no confirmation of active exploitation in CISA KEV, the combination of a public PoC, a network-reachable attack surface and low complexity makes this a high-priority patching target for internet- or LAN-exposed devices.
OS command injection in IBM Guardium Data Protection 12.2 allows a remote, unauthenticated attacker to execute arbitrary operating system commands on the affected appliance, giving full compromise of confidentiality, integrity, and availability (CVSS 8.1, CWE-78). The assessed vector (AV:N/AC:H/PR:N/UI:N) means no credentials and no user interaction are needed, but exploitation is not a single deterministic request - the attacker must first satisfy a specific precondition such as a crafted payload meeting input constraints or a particular application/timing state, and the target's vulnerable network service must be reachable, which is uncommon for a security-monitoring appliance that is typically segmented. No public exploit code and no confirmed active exploitation were identified at time of analysis; a vendor patch is available per the referenced IBM support advisory.
OS command injection in IBM Guardium Data Protection 12.2 allows a privileged authenticated attacker to execute arbitrary commands with root-level privileges through the Universal Connector plugin upload feature. The flaw carries a CVSS 3.1 base score of 7.2 (HIGH) under the vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, reflecting network reachability and full confidentiality, integrity and availability impact, though exploitation is gated behind a high-privilege account. No public exploit code is identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV).
Unauthenticated OS command injection in IBM Guardium Data Protection 12.2 allows a remote attacker with network reachability to a vulnerable appliance component to execute arbitrary operating system commands, yielding full confidentiality, integrity, and availability impact on the affected system. The vendor CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.1 High) confirms no authentication or user interaction is required, though the AC:H rating indicates exploitation depends on a precondition not fully specified by IBM rather than being reliably repeatable against any default install. No public exploit code or confirmed active exploitation was identified at time of analysis, but real-world risk is elevated because Guardium is a security-data platform that frequently holds sensitive audit and database activity records, and successful exploitation effectively equates to remote code execution on the appliance.
Authenticated OS command injection in IBM Guardium Data Protection 12.2 allows a remote attacker holding a valid low-privilege session to execute arbitrary operating-system commands on the affected appliance, with high impact to confidentiality, integrity, and availability (CVSS 3.1 base 8.8). The flaw is rated AV:N/AC:L/PR:L/UI:N/S:U, so exploitation requires credentials - authentication requirements are confirmed as authenticated (PR:L) by the assessed vector - but no user interaction and no non-default configuration; the specific vulnerable feature and input parameter are not disclosed in the advisory, and no public exploit code has been identified at time of analysis (not listed in CISA KEV). Realistic risk therefore centers on malicious insiders, compromised or reused operator accounts, and attackers who have already established a foothold on the management network, and IBM states a vendor patch is available.
Command injection in IBM Guardium Data Protection 12.2 lets an authenticated, highly privileged administrator execute arbitrary shell commands with root privileges by supplying a crafted filename to the 'import remotelog_config file' CLI command. Successful exploitation compromises the confidentiality, integrity, and availability of the appliance, and no public exploit has been identified at time of analysis. IBM has released a fix via its support advisory, so exposure is limited to unpatched 12.2 deployments whose administrative CLI access is reachable by an attacker.
Command injection in the 'create csr wildcard' CLI command of IBM Guardium Data Protection 12.2 allows an authenticated privileged CLI user to embed shell metacharacters in the 'alias' input, breaking out of the restricted CLI and executing arbitrary commands with root privileges on the appliance. The CVSS v3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, 7.2 High) confirms this is not an unauthenticated remote compromise: the attacker must already hold privileged CLI credentials and CLI access, typically over SSH, making this fundamentally a restricted-shell-to-root privilege escalation rather than an external initial-access vector. Impact is total for confidentiality, integrity, and availability of the appliance given the root-level execution context; no public exploit code was identified at time of analysis, and CISA KEV does not list this CVE as actively exploited.
IBM Guardium Data Protection 12.2 allows an authenticated low-privileged user to execute arbitrary operating system commands through an unspecified input validation flaw. The vulnerability, requiring a valid account but no user interaction and reachable over the network, executes commands with the low privileges of the compromised user, limiting direct system takeover but enabling data access or lateral movement. With EPSS at 0.26% and no public exploit or KEV listing, the immediate threat is limited, but the CVSS score of 8.8 and potential for abuse warrant prompt patching.
Authenticated OS command injection in IBM Guardium Data Protection 12.2 lets a user holding only low-privilege console credentials execute arbitrary operating-system commands on the affected appliance through the exportCertificate functionality, resulting in full loss of confidentiality, integrity, and availability (CVSS 3.1 base score 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Because the attack requires valid credentials and network reachability to the Guardium management interface, it is not usable by unauthenticated outsiders; CISA's SSVC assessment records Exploitation as 'none' and Automatable as 'no', and no public exploit code has been identified at time of analysis. EPSS is 0.63 percent (49th percentile), consistent with a targeted, credentialed issue rather than a broadly exploited one, and IBM has published a vendor patch.
Command injection in btrbk's ssh_filter_btrbk.sh helper (versions 0.29.0 through 0.32.6) lets a user who already holds an SSH key restricted by that script append a trailing pipe command to an otherwise permitted btrbk invocation, executing arbitrary commands with the privileges of the backup-target SSH account. The root cause is a missing end-of-string anchor in the allow_stream_match regular expression, so the filter validates only a command prefix and ignores everything after it. Exploitation is gated: it requires that the deployment actually use ssh_filter_btrbk.sh as an authorized_keys forced command (deployments that do not are explicitly unaffected), and an attacker must already control a key subject to that restriction (PR:L); no public exploit has been identified at time of analysis. The issue is fixed in btrbk 0.32.7 via upstream commit 29ca3c0.
OS command injection in the web management server of PLANET IGS-5225-8P2T4S industrial managed switches lets a remote, low-privilege authenticated attacker run arbitrary operating-system commands and obtain root on the device. Only switches running V1 firmware before 1.2412b260707 or V2 firmware before 2.2412b260519 are affected; patched builds from the vendor address the flaw. Exploitation requires network reachability to the switch's web interface plus valid credentials (PR:L), so exposure is limited to segmented OT/industrial networks where the management UI is reachable; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV, though the high EPSS-relevant characteristics of authenticated command injection in edge/OT devices make prompt patching advisable.
Command injection in NUUO Network Video Recorder 2.0.0 lets remote, unauthenticated attackers (PR:N per the CVSS vector) execute arbitrary OS commands through the handle_import_privilege.php endpoint, although the CVSS UI:R metric indicates that some user interaction is required to trigger the flaw. The vendor software passes unsanitized input to an OS command (CWE-77), and SSVC rates the issue as automatable with total technical impact; publicly available exploit code exists via a referenced public gist, but there is no evidence of confirmed active exploitation (CISA KEV). Because NVRs are frequently internet-exposed, this is a genuine high-priority issue for any deployment of version 2.0.0.
Command injection in Microsoft 365 Copilot lets an authenticated, low-privilege user with network access to the service inject special command elements into an input surface that fails to neutralize them (CWE-77), achieving total impact to confidentiality, integrity, and availability (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Because Copilot is a Microsoft-hosted SaaS offering, only tenants that have licensed and enabled Copilot are exposed, and remediation is applied server-side by Microsoft rather than by customer patching. No public exploit code was identified at time of analysis, KEV does not list this CVE, and EPSS is low at 0.53% (44th percentile), though CISA's SSVC assessment rates technical impact as total and the exact vulnerable feature or endpoint is not named in the vendor advisory.
Unauthenticated command injection (CWE-77) in Microsoft 365 Copilot's Business Chat allows an attacker who can supply content the service processes to disclose information, with the scope-change flag indicating the exposed data crosses out of the attacker's own context. The affected component is the enterprise 'work'-grounded Copilot chat (CPE microsoft:365_copilot_chat), delivered as a Microsoft-hosted SaaS rather than a customer-installed binary, so only organizations that have Copilot Business Chat enabled and reachable are exposed. Exploitation is not confirmed: no public exploit code exists at time of analysis, the CVE is not in CISA KEV, EPSS is a low 0.49% (41st percentile), and CISA SSVC marks exploitation as none and non-automatable - making this a real but moderate-priority issue rather than an urgent one, even though the CVSS base score is 8.6.
OS command injection in JabRef's built-in HTTP server (CWE-78) lets a caller who can reach the localhost GET /better-bibtex/cayw endpoint with application=sublime smuggle shell metacharacters through the untrusted cite-command prefix, which is concatenated with citation keys and executed via sh -c by PushToSublimeText without escaping, achieving arbitrary command execution as the JabRef user. The CVSS 4.0 vector (AV:N/AC:H/AT:P/PR:N/UI:A) shows this is remotely reachable and requires no authentication, but exploitation is gated behind a stack of non-default conditions: the built-in server must be enabled or jabsrv running, a valid Sublime Text command path must be configured as a push target, only Unix-like systems are affected because of the sh -c invocation, and the victim must actively complete the CAYW citation selection dialog. No KEV listing and no public exploit code were identified at time of analysis; the layered opt-in and interaction requirements keep real-world risk comparatively low despite the high confidentiality, integrity and availability impact if the preconditions are met. The flaw is fixed in 6.0-alpha.6.
Authenticated Browsertrix users who hold crawler or administrator permission on an org can execute arbitrary operating-system commands inside the backend pod by submitting a crafted Git URL to the Custom Behaviors validation endpoint, affecting versions 1.15.0 through 1.22.7. The pre-fix code built a shell command string by interpolating the user-supplied repository URL into 'git ls-remote', so shell metacharacters in that URL were interpreted by the shell and ran with the backend pod's privileges; the vendor advisory notes that open registration or hosted free-trial access can make the required role broadly obtainable, materially lowering the barrier. No public exploit code has been identified at time of analysis, and the issue is remediated in the vendor-released version 1.22.8, which switches to argument-list subprocess execution, adds a 30-second timeout, disables git credential prompts, and drops privileges to nobody (uid/gid 65534).
Command injection in the @cyclonedx/cyclonedx-npm CLI (versions before 6.0.0) lets an attacker who controls the value passed to the --workspace option run arbitrary operating-system commands on Windows hosts, with the privileges of the user invoking the tool. Exploitation is narrowly gated: the host must be Windows, the CLI must be invoked with --workspace, and the vulnerable Windows fallback npm-execution path in src/npmRunner.ts must be reached, which only occurs when the npm_execpath environment variable does not already point at the npm CLI. The assessed vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) shows local attack, no privileges required, but user interaction is needed, so the realistic scenario is a CI/CD or scripted pipeline that feeds untrusted data into --workspace; no public exploit code or confirmed active exploitation was identified at time of analysis, and the flaw is fixed in version 6.0.0.
Unauthenticated remote OS command injection in FatPipe MPVPN, WARP, and IPVPN appliances running end-of-life firmware 10.1.2r60p100 enables an attacker who can reach the management web interface to execute arbitrary commands as root through crafted input to the AuthFormServlet endpoint. The vulnerable interface is disabled by default and must be affirmatively enabled by the customer, and exploitation also requires that AuthFormServlet be network-reachable; the CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) reflects maximum technical impact once those prerequisites are met. No public exploit code was identified at time of analysis, and because the firmware is end-of-life, no vendor-released patch was identified - only configuration hardening such as restricting management access to trusted administrative networks.
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows a network-reachable attacker to run arbitrary operating-system commands on the host, yielding full confidentiality, integrity, and availability impact (CVSS 8.1, C:H/I:H/A:H, CWE-78). Affected deployments include the Windows managed-node patch build and the managed-node packages for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04; the vendor rates attack complexity as high (AC:H), so successful exploitation hinges on a specific non-default condition, timing, or crafted-input constraint rather than a single trivial request. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, while hosts already updated to 11.1.0.3 are not affected.
Local privilege escalation in the GNOME NetworkManager SSTP plugin allows a low-privileged local user who can create or modify an SSTP VPN connection profile to inject OS commands that are executed with root privileges by the pppd pty shell when the connection is activated. The vulnerability, tracked as CVE-2026-91838, is a command injection (CWE-78) with a CVSS score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The SSTP plugin is an optional, non-default component, and no public exploit code has been identified at the time of analysis.
Local privilege escalation in the NetworkManager iodine VPN plugin (network-manager-iodine) lets an authenticated local user obtain code execution as root through option confusion in the root-privileged nm-iodine-service. A user who is permitted (typically via polkit for an active session) to create or edit an iodine VPN connection can supply a connection property value that iodine's command-line parser interprets as an option flag instead of data, producing behaviour that runs while the service is still root and before iodine drops privileges to an unprivileged user. Exploitation requires local access plus an installed, configured plugin, and no public exploit was identified at time of analysis; the assessed vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (high confidentiality, integrity and availability impact, scope unchanged). Note that no CVSS vector, CWE, EPSS, KEV, SSVC or POC signal was supplied in the source data, so severity here derives from the independent assessment rather than vendor scoring.
Authenticated OS command injection in the MitraStar GPT-2741GNAC-N2-SV residential gateway running firmware BR_g8.10_1.11(WVK.0)b46 lets a logged-in user run arbitrary shell commands on the device by appending shell metacharacters to parameters in a crafted POST request to the /cgi-bin/device-management-utilities-internet.cgi diagnostics endpoint, producing full compromise (CVSS 8.8, AV:N/PR:L/UI:N with high confidentiality, integrity and availability impact). Exploitation requires valid web-management credentials plus network reachability to the management interface, which is normally LAN-side but escalates sharply if remote or WAN administration is enabled. No confirmed active exploitation has been observed and EPSS is low at 0.15% (5th percentile), although a public GitHub repository targeting this exact model and firmware version is cited in the CVE record, indicating technical exploitation material is publicly documented.
Stored OS command injection in the CloneSite plugin of AVideo (through version 29.0) lets an attacker who can plant a malicious SSH password - including through CSRF against an authenticated administrator - execute arbitrary shell commands as the crontab owner, commonly root or www-data, once the plugin's documented cron job runs. The CVSS 4.0 vector (AV:N/PR:N/UI:P) means unauthenticated remote attackers can trigger the chain but must socially engineer an already-authenticated administrator into submitting the crafted request, and exploitation also requires the CloneSite plugin to be enabled with its crontab installed plus one of two CSRF channels: a same-host TLS-terminating reverse proxy with $global['trustedProxies'] unset, or an attacker-controlled application co-hosted on the same hostname abusing the HTTPS SameSite=None session cookie. Default single-process Apache deployments are explicitly reported as not CSRF-exploitable, and no public exploit was identified at time of analysis, though the technical impact when the chain succeeds is full command execution with the injected payload persisted in the plugin configuration.
Command injection in Cisco Identity Services Engine (ISE) allows an authenticated, high-privileged remote administrator to execute arbitrary OS commands and escalate to root by sending a crafted HTTP request. The provided data identifies affected Cisco ISE software via CPE and notes that in single-node deployments exploitation can also render the node unavailable, causing a DoS condition that blocks unauthenticated endpoints from reaching the network until the node is restored. No public exploit identified at time of analysis; exploitation requires valid high-privileged administrative credentials, which sharply limits the threat despite the 9.1 CVSS score.
Command injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege credentials to inject and execute arbitrary commands, carrying a vendor-assigned CVSS of 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact and a Scope:Changed rating. The flaw was disclosed as one of multiple issues fixed in a grouped Cisco internal 'hardening release' advisory (cisco-sa-hardening-ndw1-psFvnrg) rather than a single externally reported CVE, so specific exploit prerequisites and exact affected version boundaries should be confirmed against that advisory's fixed-release table. Authentication is the primary limiting factor - the attacker must already possess valid low-privilege credentials or a session on the management interface - and no public exploit code or confirmed active exploitation was identified at time of analysis.
Command injection weaknesses in HP Linux Imaging and Printing Software (HPLIP) allow a local attacker to execute arbitrary operating-system commands with the privileges of the affected HPLIP component, resulting in high confidentiality, integrity, and availability impact (vendor CVSS 4.0 base 8.4) and spanning remote code execution, privilege escalation, denial of service, information disclosure, and unauthorized file modification. Exploitation is not remote: it requires local access to a Linux host that has HPLIP installed and in use, and it requires active user interaction, typically by inducing a legitimate user to feed attacker-controlled input into a vulnerable HPLIP component that builds an OS command (CWE-78). No authentication or elevated privileges are needed (PR:N), and no public exploit code or confirmed active exploitation was identified at time of analysis; HP has released remediation for the affected components in advisory HPSBPI04151.
Command injection in the REST API of Cisco ISE and ISE-PIC allows authenticated administrators to execute arbitrary commands with root privileges on the underlying operating system, potentially leading to complete node compromise and, in single-node deployments, a denial-of-service condition. This vulnerability (CVE-2026-20306) requires valid administrative credentials (PR:H) and network access to the management interface; no public exploit code has been identified at the time of analysis. The CVSS 3.1 base score is 9.1, driven by the high impact of root-level code execution and scope change from the web application to the OS.
Cisco ISE and ISE-PIC contain an OS command injection flaw (CWE-78) in their web-based diagnostic tools that lets an authenticated remote attacker with valid administrative credentials execute arbitrary commands and gain root on the underlying operating system. Because the attacker must already hold admin rights (PR:H), this is primarily a privilege-escalation and integrity-risk issue rather than an anonymous entry point, though the CVSS 3.1 score is 9.1 Critical (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) due to the scope change and full loss of confidentiality, integrity, and availability. On single-node deployments, successful exploitation can render the ISE node unavailable and block endpoints that have not yet authenticated from reaching the network, producing a denial-of-service condition; no public exploit code and no confirmed active exploitation were identified at time of analysis.
Command injection in SSH.NET's ScpClient (Renci.SshNet, all releases prior to 2026.0.0) lets a remote attacker who can influence the remote path supplied by a calling application execute arbitrary commands as the authenticated SSH user on a shell-based server. The default RemotePathTransformation.DoubleQuote cannot safely quote every remote command interpreter, so shell metacharacters that survive the transformation are parsed by the server's shell when the scp command line is assembled. Exploitation is conditional rather than automatic: the target must be a shell-based SSH server and the path must be crafted for that shell's parsing rules, and the assessed vector (AV:N/AC:H/PR:L/UI:N) requires an authenticated SSH session; no public exploit code or active exploitation has been identified at time of analysis, and applications using SftpClient, non-shell-based servers, or fully neutralizing transformations such as ShellQuote against POSIX shells are not affected.
Local privilege escalation in the Dell Update Package (DUP) Framework, versions prior to 26.07.03, allows a low-privileged user who already holds a foothold on the host to inject OS commands and gain elevated privileges (CVSS 3.1 base 7.8; vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The flaw is a CWE-78 command-injection issue that needs local access and no user interaction, and a vendor fix is available in version 26.07.03 per Dell advisory DSA-2026-417. No public exploit code has been identified at time of analysis, EPSS estimates exploitation likelihood at roughly 0.5% (42nd percentile), and CISA SSVC records no evidence of exploitation. This is a local-only elevation-of-privilege primitive, not a remotely reachable flaw, so exposure is limited to hosts where the DUP Framework is installed and invoked.
A high-privileged authenticated attacker can inject and execute arbitrary operating-system commands on the Ruijie RG-EW3000GX router running firmware EW_3.0(1)B11P380, through the user_list_note functionality that manipulates the Name argument resolved from /etc/rg_config/admin. The vulnerability is network-reachable and requires no user interaction, but the CVSS vector (PR:H) confirms it is only exploitable after obtaining administrator credentials for the device management interface, so anonymous internet attackers cannot reach it directly. Publicly available exploit code exists (a GitHub proof-of-concept for the RG-EW3000GX user_list_note flaw), which materially raises the likelihood of post-authentication abuse, particularly on routers whose management plane is exposed to the WAN or protected by weak/default admin passwords; no CISA KEV entry has been reported for this CVE.
OS command injection in the Ruijie RG-EW3000GX router (firmware EW_3.0(1)B11P380) lets an attacker who already holds a valid administrator session execute arbitrary shell commands on the device by injecting metacharacters into the data.url argument of a configChange request handled by the cc_set function in unifyframe-sgi.elf. Exploitation is remote and low-complexity once admin access is obtained, and publicly available exploit code exists (PoC disclosed via GitHub and VulDB), though there is no CISA KEV confirmation of active exploitation. Because the CVSS vector carries PR:H and the independent assessment confirms the configChange/cc_set path is not reachable pre-authentication, this is a real but privilege-gated vulnerability rather than an unauthenticated takeover.
Authenticated OS command injection in the web management interface of Advantech EKI-1242IEIMS and EKI-1242EIMS industrial gateways (reported in firmware V1.06.01) allows an attacker holding high-privilege management credentials to run arbitrary operating-system commands as root through crafted request parameters. Exploitation requires network reachability to the device's management plane plus valid privileged authentication (CVSS PR:H), after which a single low-complexity, no-interaction request yields full confidentiality, integrity, and availability impact on the appliance (assessed CVSS 3.1 base 8.8; vendor-published CVSS 4.0 score 8.6). Intelligence sources show no CISA KEV listing and no public exploit identified at time of analysis; the practical gate is that these OT edge devices are normally deployed on segmented industrial networks rather than internet-exposed, making management-plane reachability the limiting factor.
Unauthenticated OS command injection in the edgserver management service of Advantech EKI-1242EIMS and EKI-1242IEIMS gateways running firmware V1.06.01 lets remote attackers execute arbitrary operating-system commands with root privileges via crafted requests sent to TCP port 5058. No credentials or user interaction are required (CVSS 4.0 vector PR:N/UI:N, provider score 9.3; our independent CVSS 3.1 assessment is AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity and availability impact), and default configurations are affected. Exploitation is gated only by network reachability to the management port - there is no public exploit identified at time of analysis and the CVE is not in CISA KEV, but the issue is a genuine high-priority risk on any deployment where port 5058 is exposed beyond a trusted management segment.
OS command injection in the web management interface of the Advantech EKI-1242IEIMS and EKI-1242EIMS industrial gateways (firmware V1.06.01) lets an attacker who already holds high-privilege administrative credentials send a crafted HTTP request whose unsanitized parameters are passed into an OS command executed as root, yielding full compromise of confidentiality, integrity, and availability of the device. The attack is remote and low-complexity with no user interaction required, but it is access-gated: the CVSS 4.0 vector carries PR:H, so exploitation presupposes valid admin access to the management UI - no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV). Risk is materially amplified when the web interface is reachable from untrusted networks and protected only by default or weak credentials, a common condition for field-deployed industrial gateways.
OS command injection in the web management interface of Advantech EKI-1242IEIMS and EKI-1242EIMS industrial devices running firmware V1.06.01 lets a remote attacker who already holds a valid authenticated session on the management UI execute arbitrary operating system commands with root privileges through crafted request parameters. The vulnerability (CWE-78), reported by Nozomi Networks Labs, is rated 8.6 under CVSS 4.0 (our independent assessment maps it to 8.8 under CVSS 3.1, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), and the high PR:H value means the attacker must first authenticate - typically at administrator level - before the injection is reachable. There is no CISA KEV listing and no public exploit identified at time of analysis, so the practical risk is driven less by exploit popularity than by how broadly the device's management plane is exposed to untrusted networks.
Authenticated high-privileged users of Advantech EKI-1242IEIMS and EKI-1242EIMS industrial gateways running firmware V1.06.01 can execute arbitrary operating system commands as root through the device's web management interface, because crafted request parameters reach an OS command without proper neutralization (CWE-78, OS Command Injection). The vendor-assigned CVSS 4.0 score is 8.6 (AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H), reflecting network reachability and complete compromise of the device's confidentiality, integrity and availability with no user interaction, but exploitation deliberately depends on the attacker first holding valid administrative credentials on the management UI. Reported by Nozomi Networks Labs; no public exploit code and no confirmed active exploitation were identified at time of analysis, so the realistic risk is driven by whether the web interface is exposed and how tightly administrative access is controlled.
OS command injection in the web management interface of Advantech EKI-1242IEIMS industrial gateways (firmware V1.06.01) lets a remote authenticated attacker with high privileges execute arbitrary OS commands as root. Exploitation requires a valid high-privilege session (CVSS 4.0 PR:H) and network reachability to the management interface, but then yields full device compromise (VC:H/VI:H/VA:H). No public exploit or active exploitation has been identified at time of analysis.
OS command injection in the WNC T-Mobile 5G Box IDU router's portal.cgi password-change function allows an attacker who already holds high-privilege portal credentials and is positioned on the adjacent network to run arbitrary operating-system commands as root, yielding full device compromise (CVSS 4.0 base 9.3). The root cause is improper neutralization of shell metacharacters in the http_passwd_hidden and http_passwdConfirm_hidden parameters, so a crafted password-change request is interpreted by the underlying shell rather than treated as inert input. Only firmware below 1.1.0.651412 is affected and the issue is fixed in 1.1.0.651412; exploitation is constrained by AV:A (LAN/Wi-Fi-side reachability, not the public internet) and PR:H (valid admin credentials required first), and no public exploit identified at time of analysis.
Unauthenticated OS command injection in the WNC T-Mobile 5G Box IDU router (firmware below 1.1.0.651412) lets an attacker on the adjacent network run arbitrary shell commands as root through a crafted cli_cookie parameter POSTed to /cgi-bin/portal.cgi. Because the affected parameter is concatenated straight into a shell 'find' command with no sanitization, successful exploitation yields full root-level control of the device - high confidentiality, integrity, and availability impact - and the CVSS 4.0 score of 9.4 reflects that severity. The decisive limiting factor is reachability: the vector is AV:A (adjacent), so the attacker must already sit on the LAN/Wi-Fi side or the same L2 segment unless the management interface is exposed to the WAN. There is no CISA KEV entry and no public exploit code identified at time of analysis, but a vendor patch exists, and CERT-PL is credited with reporting the issue.
Authenticated OS command injection in the WNC T-Mobile 5G Box IDU router's web management portal lets an admin-level attacker on the adjacent network run arbitrary shell commands as root. The flaw (CWE-78) sits in the ping diagnostic feature of /cgi-bin/portal.cgi, where the ping_ip, ping_size, and ping_times POST parameters are concatenated into a system command without validation or sanitization; no user interaction is required once credentials are held. All firmware versions below 1.1.0.651412 are affected, and exploitation is constrained by two prerequisites - network reachability to the portal (AV:A, adjacent/local rather than internet-facing) and valid high-privilege (PR:H) portal access - so the practical risk, despite the 9.3 CVSS 4.0 base score, is bounded by the fact that the attacker must already be an authenticated admin on the local network segment. No public exploit code has been identified and the issue is not listed as confirmed actively exploited (CISA KEV) at time of analysis; CVE-2026-40855 was reported by CERT-PL and a vendor patch exists.
Command injection in the gRPC Network Security Interface (gNSI) Credentialz service of Arista EOS allows an authenticated, low-privileged attacker with access to the gRPC management endpoint to send a crafted request that modifies a target account's properties, potentially granting that account elevated privileges or broader access than an administrator intended (CVSS 4.0 base 8.6; assessed CVSS 3.1 8.6, AV:N/AC:L/PR:L/UI:N/C:H/I:H/A:N). Exposure is conditional: the device must be running an affected EOS maintenance train (4.30.0F through 4.36.0.1F) with gNSI Credentialz configured, a non-default management feature, and the attacker must already hold authenticated access to that endpoint, making this a privilege-escalation-from-foothold rather than an anonymous remote compromise. A vendor patch is available per the Arista advisory; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the issue is narrower in practice than the raw score suggests because of the configuration prerequisite.
Root-level remote code execution affects Pepperl+Fuchs ICE2/ICE3-series and Phoenix Contact IOL-MA8 IO-Link master gateways, where an unauthenticated attacker uploads a crafted IODD (IO Device Description) file that drops and executes an arbitrary shell script as root. The injected script survives reboot, granting persistent full control of the industrial device. No public exploit is identified at time of analysis and the CVE is not in CISA KEV, but the CVSS 9.8 rating reflects trivial network reachability and complete device compromise.
Command injection via the `/api/datastorage/data` REST API endpoint in Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL-MA8 IO-Link master devices allows an authenticated administrator to execute arbitrary OS commands with root privileges by sending a crafted HTTP PUT request. The flaw spans multiple hardware variants from both vendors and is disclosed across three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating broad impact across related product families. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
Command injection on Pepperl+Fuchs ICE2/ICE3 series IO-Link Master devices and OEM-equivalent variants (Phoenix Contact IOL-MA8, and others) allows an authenticated remote admin to execute arbitrary OS commands as root via a crafted GET request to the /api/datastorage/data endpoint. The vulnerability is reported across at least three separate CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating coordinated multi-vendor OEM disclosure spanning Pepperl+Fuchs, Phoenix Contact, and additional industrial automation suppliers. No public exploit code or active exploitation has been identified at time of analysis, but the industrial OT context raises availability and safety concern disproportionate to a purely IT risk framing.
Command injection in the web management API of Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and Phoenix Contact IOL MA8 enables an authenticated admin-level attacker to execute arbitrary OS commands as root via a crafted PUT request to the /api/iodd/config endpoint. All firmware versions of at least nine Pepperl+Fuchs ICE2/ICE3 hardware variants and the Phoenix Contact IOL MA8 PN DI8 are confirmed affected across three CERT@VDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028). No public exploit code or active exploitation is identified at time of analysis, but full root compromise of an industrial field device represents a significant ICS/OT risk.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and related Phoenix Contact hardware allows a remote attacker holding valid admin credentials to execute arbitrary OS commands with root privileges via a crafted GET request to the /api/iodd/config endpoint. The vulnerability is confirmed by three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating it spans multiple vendor product lines and firmware variants. No public exploit or active exploitation is identified at time of analysis, but root-level code execution on OT network edge devices represents a significant lateral-movement and persistence risk in industrial environments.
Command injection in the Pepperl+Fuchs ICE2/ICE3 IO-Link Master firmware - and functionally equivalent Phoenix Contact IOL-MA8 variants - allows a remote admin-authenticated attacker to achieve root-level OS command execution by sending a crafted DELETE request to the `/api/status/data` REST API endpoint. All currently listed firmware versions across the ICE2 and ICE3 product lines are affected, with no upper version bound in NVD CPE data. No public exploit code or CISA KEV listing has been identified at time of analysis, and the vendor-assigned CVSS 7.2 appropriately reflects the PR:H prerequisite that meaningfully gates exploitation to scenarios where admin credentials are already available to the attacker.
Command injection in Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL MA8 series IO-Link Master devices allows a low-privileged remote attacker to execute arbitrary OS commands with root privileges by sending a crafted GET request to the /api/status/data REST endpoint. Three separate CERTVDE coordinated advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028) indicate the same vulnerable firmware stack is shared across multiple industrial automation vendors, broadening the effective attack surface beyond any single manufacturer. No public exploit code or active exploitation has been identified at time of analysis.
Command injection via a PHP web management endpoint on Pepperl+Fuchs ICE2/ICE3 series IO-Link Masters and Phoenix Contact IOL_MA8_PN_DI8 allows an authenticated operator-level attacker to execute arbitrary OS commands with root privileges on the device. The vulnerable endpoint, `/index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files`, passes user-supplied filenames to an underlying OS command without sanitization, enabling full device compromise. No public exploit code or KEV listing has been identified at time of analysis, but the low attack complexity and network accessibility make this a serious risk in OT/ICS environments.
Command injection via the PHP-based IODD parameter save endpoint on Pepperl+Fuchs ICE2/ICE3 series IO-Link masters and OEM-equivalent devices allows an authenticated operator-level attacker to execute arbitrary OS commands with root privileges on the device. Affected hardware includes multiple ICE2 and ICE3 form-factor variants from Pepperl+Fuchs and the Phoenix Contact IOL MA8 PN DI8, with additional OEM-labeled variants covered under three separate CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices (and OEM variants from Phoenix Contact and others) allows a low-privileged authenticated remote attacker to execute arbitrary OS commands with root privileges via the PHP-based /index.php/ajax/parameterManage endpoint. The flaw is tracked across three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating the vulnerable firmware is shared across multiple vendor rebrand families. No public exploit has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
Command injection via the Field_Shadow_Password class in Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and Phoenix Contact IOL_MA8_PN_DI8 allows a network-authenticated attacker holding only operator-level credentials to inject OS commands that execute with root privileges on the device. The vulnerability (CWE-78) is exploitable without user interaction against a low-privileged account, resulting in full confidentiality, integrity, and availability compromise of the affected industrial device. No public exploit code or CISA KEV listing has been identified at time of analysis; three coordinated CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028) cover multiple vendor families sharing the same underlying platform.
Command injection in Pepperl+Fuchs ICE2/ICE3 series and Phoenix Contact IOL_MA8 IO-Link master devices enables an authenticated low-privileged attacker to execute arbitrary OS commands as root via the /index.php/attached_devices_tab/do_upload web management endpoint. The vulnerability (CWE-78) is exploitable remotely without user interaction using only operator-level credentials, yielding full device compromise including confidentiality, integrity, and availability of the industrial gateway. No public exploit code or CISA KEV listing has been identified at time of analysis, though three separate CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028) indicate coordinated multi-vendor disclosure.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices and OEM equivalents allows a low-privileged authenticated attacker to execute arbitrary OS commands as root via the /index.php/ajax/get_iodd_port_info PHP endpoint. Affected hardware spans multiple ICE2 and ICE3 form factors (G65L, K45P, K45S housings) as well as Phoenix Contact IOL MA8 and additional OEM-branded variants sharing the same firmware. No public exploit code has been identified at time of analysis, but the low attack complexity and high impact make this a credible priority in any industrial network where these devices are reachable.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices (and OEM equivalents from Phoenix Contact and others) allows a low-privileged authenticated attacker to execute arbitrary OS commands as root via the PHP endpoint /index.php/ajax/get_iodd_menu_info. Any valid user or operator account - the lowest access tiers on the device - is sufficient to achieve full device compromise. No public exploit has been identified at time of analysis, but the vulnerability is straightforward (CWE-78) and reported across three separate CERTVDE advisories covering multiple vendor SKUs, indicating a shared firmware base.
Command injection in Arista EOS-based products lets an authenticated user of the gRPC Network Security Interface (gNSI) Certz service escalate privileges and run arbitrary OS commands as root by sending a crafted Certz Rotate request, resulting in full device compromise; the Bootz service is affected by the same flaw. The issue is a CWE-78 OS command injection reported by Arista and carries a CVSS 4.0 base score of 9.4. There is no public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV.
OS command injection in Arista VeloCloud Edge management and configuration workflows allows input supplied through those workflows to be interpreted as an operating-system command, resulting in command execution with elevated privileges on the appliance. Exploitation requires a high-privileged management request or the ability to write a configuration value, so this is primarily a privileged-insider, compromised-admin-account, or post-compromise escalation risk rather than an unauthenticated internet-facing flaw. No public exploit code or active exploitation has been identified at time of analysis, and no EPSS score was supplied with the record.
Netcore NR255-V routers running firmware 1.5.130703 build root-privileged shell command lines from unquoted DDNS configuration input in DDNSset_cgi.c and related ddns_Proc.c code, letting an authenticated administrator inject extra command arguments that execute as root. Successful abuse yields complete device compromise, including configuration theft, traffic interception, and use of the router as a foothold into the LAN. The CVSS 4.0 vector indicates network reachability with high prerequisites, and no public exploit code or CISA KEV entry was present at time of analysis; the public technical reference writeup is the main disclosure vehicle.
Authenticated attackers can inject crafted arguments into the tcpdump launch routines exposed by the Nettools feature of Netcore NR255-V firmware 1.5.130703, causing the device to execute attacker-manipulated system commands as part of the tcpdump invocation. The flaw affects multiple CGI/handler components — ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default and ntools_proc — and carries a CVSS 4.0 base score of 8.7 (AV:N/AC:L/PR:L/UI:N) with high confidentiality, integrity and availability impact confined to the device itself. Exploitation requires a low-privileged foothold on the router's management interface, and no public exploit code, EPSS score, or CISA KEV listing was supplied in the available intelligence.
Rsbuild versions before 2.0.9 contain a command injection flaw in the developer-server browser-launcher on macOS. The openBrowser() helper in packages/core/src/server/open.ts passes a URL through encodeURI() and then interpolates it into a string handed to child_process.exec(), and because encodeURI() leaves characters such as $, (, ), and ; untouched, a crafted URL is evaluated by /bin/sh and can execute arbitrary operating-system commands with the privileges of the developer running the dev server. The issue was fixed in the 2.0.9 release (upstream PR 7789), so a vendor-released patch is available; no CISA KEV listing or public exploit code was present in the supplied intelligence, and the attack requires local conditions on the developer machine.
Authenticated attackers holding administrative access to the management plane of HPE Networking EdgeConnect SD-WAN Gateways can supply crafted input to an affected component and achieve arbitrary command execution as root. The flaw affects multiple released trains — 9.4.x up to 9.4.8.2, 9.5.x up to 9.5.8.1, 9.6.x up to 9.6.3.1, and 9.7.0.0 — with a CVSS base score of 7.2 reflecting the high privilege prerequisite against total loss of confidentiality, integrity, and availability. There is no CISA KEV entry, no EPSS score, and no public exploit code identified at time of analysis, so this is currently a high-impact but credential-gated risk rather than an actively exploited one.
Authenticated command injection in the command-line interface of HPE Aruba EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privileged CLI credentials to break out of the appliance shell and execute arbitrary commands on the underlying operating system, resulting in complete compromise of the gateway. The flaw affects the 9.4.x, 9.5.x, 9.6.x and 9.7.x maintenance streams (9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1 and 9.7.0.0) and carries a vendor-assigned CVSS of 9.1 with a scope change from the CLI component to the host OS. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied, so the practical priority is driven by exposure of the management CLI rather than by evidence of active exploitation.
Command injection in the GitHub Actions workflow shipped with githubtoplanguages (versions before 1.1.4) lets anyone who can open an issue on a repository running the bundled discord-issue.yml workflow execute arbitrary shell commands on the Actions runner. The issue title is expanded by GitHub Actions directly into a Bash assignment, so a title containing $(...) command-substitution syntax is evaluated by the shell before the value is posted to Discord; a public proof-of-concept was demonstrated by the reporter in a fork. A successful injection can spoof trusted bot notifications and may expose the configured DISCORD_WEBHOOK secret or other workflow environment data, and remediation is available in version 1.1.4 / commit 6bf9c3a9cb66c937b9047ca266b3d02f2bb11027.
Authenticated remote code execution in GitLab Enterprise Edition (Advanced Search / Elasticsearch indexing) allows a user with project-import rights to overflow a Unicode conversion buffer by importing a specially crafted Git project export, resulting in arbitrary command execution on the GitLab server. All EE versions from 12.3 through 19.1.8, plus 19.2 before 19.2.6 and 19.3 before 19.3.2, are affected under configurations where Advanced Search is enabled. Publicly available exploit code exists and the HackerOne report is referenced, making this a high-priority patching target for internet- or partner-exposed GitLab EE instances, though exploitation requires an authenticated account and a non-default Elasticsearch-backed search configuration.
Authenticated users holding only read-only (reader) privileges on an ArcadeDB database can escalate to arbitrary JVM scripting by POSTing a {"language":"js"} command to /api/v1/command/{database}, because the polyglot query engine never applies the database-administrator authorization check enforced on the SQL/Cypher paths. A cooperating sandbox flaw lets those scripts reflect from the bound database object through database.getClass().getClassLoader().loadClass to classes outside the allowedPackages whitelist, allowing an attacker to read arbitrary host files such as /etc/passwd and configuration files outside the database scope. Process creation remains blocked, so OS command execution is not confirmed; exploitation needs valid credentials and no user interaction, the flaw is fixed in ArcadeDB 26.7.1, and no public exploit code or CISA KEV entry was identified at time of analysis.
Flowise releases prior to 3.1.4 ship GitHub Actions workflows that interpolate workflow_dispatch inputs such as tag_version and node_version directly into shell run blocks, allowing OS command injection during Docker image builds. The flaw is reachable only by a user who already holds write access to the repository (CVSS 4.0 PR:H), but the payoff is large: arbitrary command execution on the build runner with access to AWS credentials and Docker Hub tokens. No public exploit code or CISA KEV entry was reported at time of analysis, and the vendor has published a fix in 3.1.4 via GitHub Security Advisory GHSA-jrcq-qjw5-xx5q; note that this is a supply-chain/CI risk to the project's own build pipeline and to forks that reuse these workflows, not a runtime flaw in deployed Flowise instances.
Authenticated remote code execution in Flowise versions before 3.1.4 lets a low-privileged user who can create or edit a Custom MCP node run arbitrary code on the Flowise server by supplying attacker-controlled npm package names in the mcpServerConfig parameter, which Flowise then invokes through npx. The issue carries a vendor-published CVSS 4.0 score of 9.0, while our independent assessment rates it CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (8.8), reflecting that the attacker must first hold a valid Flowise account with access to the node editor - no pre-authentication path was identified. No public exploit code was identified at time of analysis and the vulnerability has not been confirmed actively exploited (no CISA KEV listing), so risk is driven mainly by how many users can reach the MCP node configuration UI and whether the instance is internet-facing or uses weak or shared credentials.
Agent-coderag versions up to and including 1.3.0 execute a repository-supplied Gradle wrapper during the default `agent-coderag sync` dependency-discovery flow, letting an attacker who plants a malicious `gradlew` in a Gradle project run arbitrary code with the victim's operating-system privileges. The flaw is a command-injection design error (CWE-78) in `code_rag/core/manager.py`, where a repository-local `gradlew` is unconditionally preferred over the system `gradle` binary and passed to `asyncio.create_subprocess_exec`; CVSS 3.1 base 8.6 with user interaction required (UI:R) because the victim must index the hostile repository. Upstream fixed the issue in 1.3.1 by using only the PATH-resolved system `gradle`; no public exploit code has been identified and the CVE is not in CISA KEV at time of analysis.
Unauthenticated OS command injection in the ping.php endpoint of Trexom's TrxTimeATTENDANCE (versions 1.0.5 through 1.9.5, fixed in 1.9.6) allows any remote attacker who can reach the endpoint to execute arbitrary operating-system commands and obtain remote code execution with the privileges of the web server process. The flaw, classified CWE-78 and scored 9.3 under CVSS 4.0, is remotely exploitable with no authentication or user interaction (PR:N/UI:N/AC:L), and publicly available exploit code exists, elevating the risk for any instance exposed beyond a trusted LAN. CISA's SSVC assessment records exploitation as 'none' at time of analysis (no KEV listing), but the total technical impact and full automatability make this a high-priority patch item for the niche organizations running this time-and-attendance application.
Arbitrary command execution in the npm TypeScript package praisonai (versions 1.5.1 through 1.7.1) allows an attacker who can influence the string passed to the exported shell() helper to break out of its read-only allowlist by prefixing an approved command and appending a second one with shell chaining syntax such as 'echo ok; <payload>'. Because utility-tools.ts validates only the first whitespace-delimited token and then hands the complete original string to Node's child_process.exec(), the injected command runs with the PraisonAI process privileges. The flaw is fixed in 1.7.2; the advisory includes a deterministic local proof-of-value, and there is no CISA KEV listing or EPSS data indicating active exploitation at time of analysis.
Ar
A command injection flaw in the WSO2 Integrator MI extension for Visual Studio Code lets a crafted Micro Integrator project run arbitrary operating system commands when its unit test execution flow is triggered. Exploitation is not remote or silent: the developer must open the untrusted project, explicitly grant it workspace trust, and then run the project's unit tests, after which injected commands execute with the privileges of the VS Code user (CVSS 3.1 base 7.0, AV:L/AC:H/PR:N/UI:R). Impact is therefore bounded by the developer workstation's account privileges, and no public exploit code or active exploitation is indicated in the available intelligence.
OS command injection in the Lite-On FlexFi 5G radio products FF-RFI079I4 and FF-RFI078I4 allows anyone who can authenticate to the device's M-Plane (NETCONF) management interface to run arbitrary operating-system commands with the privileges of the management service, leading to full compromise of the radio unit. Affected firmware is version 02.01.15 and earlier; Lite-On has released a fix. EPSS is low (1.03%, 62nd percentile) and CISA's SSVC rates exploitation as 'none' with automatable 'no', so this is currently a targeted-risk rather than a mass-exploitation issue, with no public exploit identified at time of analysis.
OS command injection in EFM ipTIME C200E firmware 1.094 allows an authenticated remote attacker with administrative privileges to execute arbitrary operating system commands via a crafted request to the iux_set.cgi endpoint in the System Setup component. A public proof-of-concept exploit, including a video demonstration, has been disclosed. No patch has been confirmed at time of analysis. No public exploit identified at time of analysis as confirmed active exploitation (CISA KEV status absent), though the POC lowers the bar for exploitation significantly.
Authenticated delegated LuCI sessions that hold the luci-app-advanced-reboot read ACL can execute arbitrary commands as root on affected OpenWrt routers, because that read ACL grants rpcd file.exec permission for the general shell interpreter /bin/sh and passes caller-controlled parameters to it. Only builds that actually ship this /bin/sh exec grant prior to version 1.1.2-6 are vulnerable; the vendor explicitly states the checked openwrt-24.10 and openwrt-23.05 branches do not carry the grant and are not affected by this chain. Exploitation requires a valid low-privilege delegated rpcd/LuCI session (CVSS vector PR:L, no unauthenticated path), and no public exploit code was identified at time of analysis; the issue is fixed in 1.1.2-6.
Authenticated command injection in KubeEdge (1.21.0 up to 1.21.2, 1.22.2, and 1.23.1) lets a principal holding Kubernetes RBAC rights to create or modify ConfigUpdateJob resources inject shell metacharacters into the updateFields passed to the keadm config-update command, which the edge taskmanager then runs through a system shell, yielding arbitrary command execution on the enrolled target edge node with the privileges of the KubeEdge process. The vendor rates this 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), and our independent assessment is slightly more severe because compromise of the node process is a scope change (S:C); the PR:L vector confirms the attacker must be authenticated and authorized, so this is not anonymous or remotely unauthenticated abuse. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, but the flaw is a genuine, actionable CWE-78 issue rather than an inflated score, and it is fixed in KubeEdge 1.21.2, 1.22.2, and 1.23.1.
Arbitrary command injection on Windows in the Perl distribution Email::Sender (Email::Sender::Transport::Sendmail versions before 2.602) lets an attacker who controls a From, To, or Cc header address execute commands as the sending process, because on MSWin32 the envelope sender and recipients are concatenated into a single command string that Perl's open() hands to a shell. The flaw is strictly Windows-only: on every other platform the transport uses open()'s list form and passes arguments directly to sendmail with no shell involved, so the injection path does not exist there, and exploitation additionally requires that the application use the sendmail transport rather than the SMTP transport and that the caller supply no explicit envelope (letting Email::Sender::Simple derive addresses from headers). The vendor CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N) overstates real-world risk given that hard platform gate; our assessment uses CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, EPSS is low at 0.22% (13th percentile), SSVC records no observed exploitation with automatable attack and total technical impact, and no public exploit code was identified at time of analysis, though a vendor patch (2.602) and an upstream commit are public.
Shell command injection in KubeEdge's v1alpha2 NodeUpgradeJob upgrade workflow allows an authenticated user who holds RBAC permission to create or update NodeUpgradeJob resources to run arbitrary commands on targeted edge nodes with the privileges of the edge upgrade process. Affected deployments are those running KubeEdge 1.12.0 through 1.21.1, 1.22.0/1.22.1, or 1.23.0 that actually process node-upgrade tasks; the vulnerability is high-priority and genuine rather than a CVSS-inflated finding, but it is gated on the NodeUpgradeJob create/update privilege (PR:L, not anonymous) so it is not reachable by unauthenticated users or on clusters that do not grant that permission. No public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS/KEV data were not supplied for this CVE. Vendor-released patches exist in 1.21.2, 1.22.2, and 1.23.1.
OS command injection in ntopng prior to 6.7.260717 allows an authenticated non-administrator user to run arbitrary operating-system commands as the ntopng process account, because the vulnerability-scan REST endpoints accepted the scan_ports parameter without an administrator check and passed it through a validator that still permits shell metacharacters. Exploitation requires nmap to be present on the host, and a secondary no-credentials path exists: the affected endpoints accept GET requests while ntopng's CSRF validation only covers POST bodies, so a logged-in victim's browser can be induced to trigger the command. The vulnerability is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H); no public exploit code or KEV-listed active exploitation was identified at time of analysis, and the issue is fixed in 6.7.260717.
OS command injection in Dassault Systèmes Tuleap Enterprise Edition versions 17.3 through 17.5 allows an authenticated remote attacker with a low-privilege account to execute arbitrary operating system commands on the server, as indicated by CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H and a base score of 8.8. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the potential for full server compromise makes this a genuine high-priority issue that is not a drop-everything emergency. Instances are only affected if they run versions 17.3-17.5 and permit low-privilege authenticated access, so environments with tightly controlled account provisioning or network restrictions face reduced exposure.
Authenticated callers holding only a write role in a single namespace can execute arbitrary commands on the host running Temporal Server's Worker Service, because the built-in `subprocess` compute provider derives the program name and argument vector from caller-supplied compute provider configuration instead of operator configuration, and the configuration handler invokes it immediately after spec validation with no scaling decision or task arrival required. Deployments are affected when running Temporal Server 1.31.0 through 1.31.2 with the Worker Service active and the per-namespace dynamic config `workercontroller.compute_providers.enabled` either unset (the default, in which case the allowlist check is skipped entirely) or explicitly containing `subprocess`; authentication with a namespace write role is required (CVSS vector PR:L), and a deployment with no authorizer is already fully open rather than being a special case of this flaw. Since the Worker Service process holds persistence credentials for every namespace in the cluster plus the cluster TLS material, successful exploitation reaches beyond the caller's namespace to the cluster as a whole, making this a genuine high-priority issue rather than CVSS inflation. Vendor patches are available in releases 1.31.3 and 1.32.0, and no public exploit was identified at time of analysis.
Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) lets remote attackers execute arbitrary shell commands on the device through the /www/cgi-bin/network_tools CGI diagnostic endpoint by supplying crafted param, key, or val arguments. The vendor CVSS 4.0 vector (9.3) rates this remote, unauthenticated, and requiring no user interaction, and publicly available exploit code exists; the vendor was contacted early but never responded, so no fix is available. Any deployment that exposes the router's web management interface to an untrusted network is at risk of full device compromise.
Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows an authenticated attacker who can reach the web management interface to run arbitrary shell commands on the device by manipulating the QUERY_STRING argument processed by restore.cgi in the Backup Restore component. The flaw is network-reachable, requires only low privileges (CVSS PR:L) with no user interaction, and produces high confidentiality, integrity and availability impact - on embedded routers this typically equates to root-level control of the device's OS. Publicly available exploit code has been released and the vendor did not respond to the disclosure, so no patch is available; the CVE is not listed in CISA KEV, meaning active exploitation has not been confirmed.
Command injection in the Netcore NBR200V2 router's firmware upgrade CGI endpoint (/www/cgi-bin/upgrade) allows authenticated administrative attackers to execute arbitrary shell commands by manipulating the QUERY_STRING parameter. The flaw affects firmware version 1.3.241127.071246, and publicly available exploit code exists. The vendor did not respond to disclosure, so no official fix is available; exploitation requires reaching the admin interface, which is typically LAN-only unless remote management is enabled.
Command injection in CrossWire Xiphos 4.3.2 and earlier lets a local attacker execute arbitrary shell commands with the privileges of the user running the application by placing shell metacharacters in data that Xiphos later interpolates into unsanitized popen() shell pipelines. Two code paths are involved: the personal-commentary rename action (on_rename_perscomm_activate in src/gtk/menu_popup.c), where the module section name is spliced into a cd/sed command, and the separate-image viewer (show_separate_image in src/main/url.cc), where an image filename is spliced into an external viewer's command line. Exploitation requires the victim to trigger one of those actions on attacker-supplied data (a crafted module or image file), the impact is confined to the victim's own account because no privilege escalation is demonstrated, and publicly available exploit code exists (SSVC records exploitation as 'poc'), although the issue is not in CISA KEV and EPSS is low at 0.15% (5th percentile).
Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows an attacker holding low-privilege credentials on the device's management interface to execute arbitrary operating-system commands by supplying a crafted ipv4 value to the LAN IP Configuration Handler in /usr/bin/network_tools. Rated CVSS 4.0 8.6 (assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N/C:H/I:H/A:H), the flaw yields full confidentiality, integrity and availability impact on the device and can pivot toward the surrounding network; publicly available exploit code exists, so weaponization effort is low, though no CISA KEV entry confirms active exploitation at time of analysis. Exploitation requires authenticated or at least low-privileged access to the management interface and is realistically reachable from the local network (and only from the internet if the admin interface is exposed), which materially narrows exposure compared with an unauthenticated flaw.
Authenticated command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows a low-privileged user of the web management interface to execute arbitrary shell commands on the device through the Traceroute Diagnostic Feature. The flaw is rooted in the 'url' argument passed to /usr/bin/network_tools, which is consumed without shell sanitization (CWE-77); because the underlying binary runs on an embedded Linux platform, successful exploitation typically yields root-level code execution, giving the attacker full control of the router (CVSS 4.0 base 8.6, AV:N/AC:L/PR:L/UI:N with High confidentiality, integrity and availability impact). Publicly available exploit code exists (a public disclosure write-up is referenced), and the vendor was contacted but did not respond, so no vendor-released patch has been identified at time of analysis. Exploitation is not confirmed as active in the wild (not listed in CISA KEV), but requires only network reachability to the management interface plus a valid low-privilege account.
OS command injection in getID3 versions before 1.9.26 allows an attacker who controls the filename passed to the library's shell-out handlers to execute arbitrary operating-system commands with the privileges of the embedding process. The vulnerable code paths build shell command lines around filenames using simple double quotes instead of escaping them, and they are reached through the shorten audio analyzer (module.audio.shorten.php) and the Vorbis comment / MetaFLAC write helpers (write.vorbiscomment.php, write.metaflac.php). Practical exposure is constrained: the host application must call those write or shorten routines and must have the vorbiscomment, metaflac, or shorten helper binaries installed and on GETID3_HELPERAPPSDIR or PATH, and low-privilege access to the embedding application is required per the vendor vector; the flaw is fixed in 1.9.26, and no public exploit code has been identified at time of analysis.
OS command injection in the D-Link R95 (BE9500) router running firmware BE9500_1.00.16 allows an attacker to execute arbitrary operating-system commands on the device by supplying a crafted NTPServer argument that the /bin/ssi binary handles on behalf of the DHMAPI component. Exploitation requires reaching and authenticating to the router's management interface (PR:H in both the CVSS 4.0 vector and our independent CVSS 3.1 assessment), so this is a post-authentication flaw that becomes dangerous when admin credentials are default, weak, or reused. Publicly available exploit code exists (a public GitHub proof-of-concept), but no CISA KEV entry confirms active exploitation; the vulnerability scores 8.5 High under CVSS 4.0, driven by full confidentiality, integrity, and availability impact on the device.
OS command injection in the Totolink A3002MU router firmware (build Hh-B20211125.1046) lets a remote attacker who holds valid low-privilege credentials execute arbitrary shell commands on the device through the formWsc handler in /boafrm/formWsc by supplying a crafted localPin argument. Because the affected component is the router's BOA web management service, successful exploitation yields full compromise of confidentiality, integrity and availability (CVSS 4.0 score 8.6, PR:L, no user interaction), and on consumer routers the required low-privilege session is often trivially satisfied by unchanged default administrative credentials. Publicly available exploit code exists (a published proof-of-concept walkthrough for the A3002MU rce-formWsc path), and although there is no confirmation of active exploitation in CISA KEV, the combination of a public PoC, a network-reachable attack surface and low complexity makes this a high-priority patching target for internet- or LAN-exposed devices.
OS command injection in IBM Guardium Data Protection 12.2 allows a remote, unauthenticated attacker to execute arbitrary operating system commands on the affected appliance, giving full compromise of confidentiality, integrity, and availability (CVSS 8.1, CWE-78). The assessed vector (AV:N/AC:H/PR:N/UI:N) means no credentials and no user interaction are needed, but exploitation is not a single deterministic request - the attacker must first satisfy a specific precondition such as a crafted payload meeting input constraints or a particular application/timing state, and the target's vulnerable network service must be reachable, which is uncommon for a security-monitoring appliance that is typically segmented. No public exploit code and no confirmed active exploitation were identified at time of analysis; a vendor patch is available per the referenced IBM support advisory.
OS command injection in IBM Guardium Data Protection 12.2 allows a privileged authenticated attacker to execute arbitrary commands with root-level privileges through the Universal Connector plugin upload feature. The flaw carries a CVSS 3.1 base score of 7.2 (HIGH) under the vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, reflecting network reachability and full confidentiality, integrity and availability impact, though exploitation is gated behind a high-privilege account. No public exploit code is identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV).
Unauthenticated OS command injection in IBM Guardium Data Protection 12.2 allows a remote attacker with network reachability to a vulnerable appliance component to execute arbitrary operating system commands, yielding full confidentiality, integrity, and availability impact on the affected system. The vendor CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.1 High) confirms no authentication or user interaction is required, though the AC:H rating indicates exploitation depends on a precondition not fully specified by IBM rather than being reliably repeatable against any default install. No public exploit code or confirmed active exploitation was identified at time of analysis, but real-world risk is elevated because Guardium is a security-data platform that frequently holds sensitive audit and database activity records, and successful exploitation effectively equates to remote code execution on the appliance.
Authenticated OS command injection in IBM Guardium Data Protection 12.2 allows a remote attacker holding a valid low-privilege session to execute arbitrary operating-system commands on the affected appliance, with high impact to confidentiality, integrity, and availability (CVSS 3.1 base 8.8). The flaw is rated AV:N/AC:L/PR:L/UI:N/S:U, so exploitation requires credentials - authentication requirements are confirmed as authenticated (PR:L) by the assessed vector - but no user interaction and no non-default configuration; the specific vulnerable feature and input parameter are not disclosed in the advisory, and no public exploit code has been identified at time of analysis (not listed in CISA KEV). Realistic risk therefore centers on malicious insiders, compromised or reused operator accounts, and attackers who have already established a foothold on the management network, and IBM states a vendor patch is available.
Command injection in IBM Guardium Data Protection 12.2 lets an authenticated, highly privileged administrator execute arbitrary shell commands with root privileges by supplying a crafted filename to the 'import remotelog_config file' CLI command. Successful exploitation compromises the confidentiality, integrity, and availability of the appliance, and no public exploit has been identified at time of analysis. IBM has released a fix via its support advisory, so exposure is limited to unpatched 12.2 deployments whose administrative CLI access is reachable by an attacker.
Command injection in the 'create csr wildcard' CLI command of IBM Guardium Data Protection 12.2 allows an authenticated privileged CLI user to embed shell metacharacters in the 'alias' input, breaking out of the restricted CLI and executing arbitrary commands with root privileges on the appliance. The CVSS v3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, 7.2 High) confirms this is not an unauthenticated remote compromise: the attacker must already hold privileged CLI credentials and CLI access, typically over SSH, making this fundamentally a restricted-shell-to-root privilege escalation rather than an external initial-access vector. Impact is total for confidentiality, integrity, and availability of the appliance given the root-level execution context; no public exploit code was identified at time of analysis, and CISA KEV does not list this CVE as actively exploited.
IBM Guardium Data Protection 12.2 allows an authenticated low-privileged user to execute arbitrary operating system commands through an unspecified input validation flaw. The vulnerability, requiring a valid account but no user interaction and reachable over the network, executes commands with the low privileges of the compromised user, limiting direct system takeover but enabling data access or lateral movement. With EPSS at 0.26% and no public exploit or KEV listing, the immediate threat is limited, but the CVSS score of 8.8 and potential for abuse warrant prompt patching.
Authenticated OS command injection in IBM Guardium Data Protection 12.2 lets a user holding only low-privilege console credentials execute arbitrary operating-system commands on the affected appliance through the exportCertificate functionality, resulting in full loss of confidentiality, integrity, and availability (CVSS 3.1 base score 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Because the attack requires valid credentials and network reachability to the Guardium management interface, it is not usable by unauthenticated outsiders; CISA's SSVC assessment records Exploitation as 'none' and Automatable as 'no', and no public exploit code has been identified at time of analysis. EPSS is 0.63 percent (49th percentile), consistent with a targeted, credentialed issue rather than a broadly exploited one, and IBM has published a vendor patch.
Command injection in btrbk's ssh_filter_btrbk.sh helper (versions 0.29.0 through 0.32.6) lets a user who already holds an SSH key restricted by that script append a trailing pipe command to an otherwise permitted btrbk invocation, executing arbitrary commands with the privileges of the backup-target SSH account. The root cause is a missing end-of-string anchor in the allow_stream_match regular expression, so the filter validates only a command prefix and ignores everything after it. Exploitation is gated: it requires that the deployment actually use ssh_filter_btrbk.sh as an authorized_keys forced command (deployments that do not are explicitly unaffected), and an attacker must already control a key subject to that restriction (PR:L); no public exploit has been identified at time of analysis. The issue is fixed in btrbk 0.32.7 via upstream commit 29ca3c0.
OS command injection in the web management server of PLANET IGS-5225-8P2T4S industrial managed switches lets a remote, low-privilege authenticated attacker run arbitrary operating-system commands and obtain root on the device. Only switches running V1 firmware before 1.2412b260707 or V2 firmware before 2.2412b260519 are affected; patched builds from the vendor address the flaw. Exploitation requires network reachability to the switch's web interface plus valid credentials (PR:L), so exposure is limited to segmented OT/industrial networks where the management UI is reachable; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV, though the high EPSS-relevant characteristics of authenticated command injection in edge/OT devices make prompt patching advisable.
Command injection in NUUO Network Video Recorder 2.0.0 lets remote, unauthenticated attackers (PR:N per the CVSS vector) execute arbitrary OS commands through the handle_import_privilege.php endpoint, although the CVSS UI:R metric indicates that some user interaction is required to trigger the flaw. The vendor software passes unsanitized input to an OS command (CWE-77), and SSVC rates the issue as automatable with total technical impact; publicly available exploit code exists via a referenced public gist, but there is no evidence of confirmed active exploitation (CISA KEV). Because NVRs are frequently internet-exposed, this is a genuine high-priority issue for any deployment of version 2.0.0.
Command injection in Microsoft 365 Copilot lets an authenticated, low-privilege user with network access to the service inject special command elements into an input surface that fails to neutralize them (CWE-77), achieving total impact to confidentiality, integrity, and availability (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Because Copilot is a Microsoft-hosted SaaS offering, only tenants that have licensed and enabled Copilot are exposed, and remediation is applied server-side by Microsoft rather than by customer patching. No public exploit code was identified at time of analysis, KEV does not list this CVE, and EPSS is low at 0.53% (44th percentile), though CISA's SSVC assessment rates technical impact as total and the exact vulnerable feature or endpoint is not named in the vendor advisory.
Unauthenticated command injection (CWE-77) in Microsoft 365 Copilot's Business Chat allows an attacker who can supply content the service processes to disclose information, with the scope-change flag indicating the exposed data crosses out of the attacker's own context. The affected component is the enterprise 'work'-grounded Copilot chat (CPE microsoft:365_copilot_chat), delivered as a Microsoft-hosted SaaS rather than a customer-installed binary, so only organizations that have Copilot Business Chat enabled and reachable are exposed. Exploitation is not confirmed: no public exploit code exists at time of analysis, the CVE is not in CISA KEV, EPSS is a low 0.49% (41st percentile), and CISA SSVC marks exploitation as none and non-automatable - making this a real but moderate-priority issue rather than an urgent one, even though the CVSS base score is 8.6.
OS command injection in JabRef's built-in HTTP server (CWE-78) lets a caller who can reach the localhost GET /better-bibtex/cayw endpoint with application=sublime smuggle shell metacharacters through the untrusted cite-command prefix, which is concatenated with citation keys and executed via sh -c by PushToSublimeText without escaping, achieving arbitrary command execution as the JabRef user. The CVSS 4.0 vector (AV:N/AC:H/AT:P/PR:N/UI:A) shows this is remotely reachable and requires no authentication, but exploitation is gated behind a stack of non-default conditions: the built-in server must be enabled or jabsrv running, a valid Sublime Text command path must be configured as a push target, only Unix-like systems are affected because of the sh -c invocation, and the victim must actively complete the CAYW citation selection dialog. No KEV listing and no public exploit code were identified at time of analysis; the layered opt-in and interaction requirements keep real-world risk comparatively low despite the high confidentiality, integrity and availability impact if the preconditions are met. The flaw is fixed in 6.0-alpha.6.
Authenticated Browsertrix users who hold crawler or administrator permission on an org can execute arbitrary operating-system commands inside the backend pod by submitting a crafted Git URL to the Custom Behaviors validation endpoint, affecting versions 1.15.0 through 1.22.7. The pre-fix code built a shell command string by interpolating the user-supplied repository URL into 'git ls-remote', so shell metacharacters in that URL were interpreted by the shell and ran with the backend pod's privileges; the vendor advisory notes that open registration or hosted free-trial access can make the required role broadly obtainable, materially lowering the barrier. No public exploit code has been identified at time of analysis, and the issue is remediated in the vendor-released version 1.22.8, which switches to argument-list subprocess execution, adds a 30-second timeout, disables git credential prompts, and drops privileges to nobody (uid/gid 65534).
Command injection in the @cyclonedx/cyclonedx-npm CLI (versions before 6.0.0) lets an attacker who controls the value passed to the --workspace option run arbitrary operating-system commands on Windows hosts, with the privileges of the user invoking the tool. Exploitation is narrowly gated: the host must be Windows, the CLI must be invoked with --workspace, and the vulnerable Windows fallback npm-execution path in src/npmRunner.ts must be reached, which only occurs when the npm_execpath environment variable does not already point at the npm CLI. The assessed vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) shows local attack, no privileges required, but user interaction is needed, so the realistic scenario is a CI/CD or scripted pipeline that feeds untrusted data into --workspace; no public exploit code or confirmed active exploitation was identified at time of analysis, and the flaw is fixed in version 6.0.0.
Unauthenticated remote OS command injection in FatPipe MPVPN, WARP, and IPVPN appliances running end-of-life firmware 10.1.2r60p100 enables an attacker who can reach the management web interface to execute arbitrary commands as root through crafted input to the AuthFormServlet endpoint. The vulnerable interface is disabled by default and must be affirmatively enabled by the customer, and exploitation also requires that AuthFormServlet be network-reachable; the CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) reflects maximum technical impact once those prerequisites are met. No public exploit code was identified at time of analysis, and because the firmware is end-of-life, no vendor-released patch was identified - only configuration hardening such as restricting management access to trusted administrative networks.
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows a network-reachable attacker to run arbitrary operating-system commands on the host, yielding full confidentiality, integrity, and availability impact (CVSS 8.1, C:H/I:H/A:H, CWE-78). Affected deployments include the Windows managed-node patch build and the managed-node packages for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04; the vendor rates attack complexity as high (AC:H), so successful exploitation hinges on a specific non-default condition, timing, or crafted-input constraint rather than a single trivial request. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, while hosts already updated to 11.1.0.3 are not affected.
Local privilege escalation in the GNOME NetworkManager SSTP plugin allows a low-privileged local user who can create or modify an SSTP VPN connection profile to inject OS commands that are executed with root privileges by the pppd pty shell when the connection is activated. The vulnerability, tracked as CVE-2026-91838, is a command injection (CWE-78) with a CVSS score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The SSTP plugin is an optional, non-default component, and no public exploit code has been identified at the time of analysis.
Local privilege escalation in the NetworkManager iodine VPN plugin (network-manager-iodine) lets an authenticated local user obtain code execution as root through option confusion in the root-privileged nm-iodine-service. A user who is permitted (typically via polkit for an active session) to create or edit an iodine VPN connection can supply a connection property value that iodine's command-line parser interprets as an option flag instead of data, producing behaviour that runs while the service is still root and before iodine drops privileges to an unprivileged user. Exploitation requires local access plus an installed, configured plugin, and no public exploit was identified at time of analysis; the assessed vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (high confidentiality, integrity and availability impact, scope unchanged). Note that no CVSS vector, CWE, EPSS, KEV, SSVC or POC signal was supplied in the source data, so severity here derives from the independent assessment rather than vendor scoring.
Authenticated OS command injection in the MitraStar GPT-2741GNAC-N2-SV residential gateway running firmware BR_g8.10_1.11(WVK.0)b46 lets a logged-in user run arbitrary shell commands on the device by appending shell metacharacters to parameters in a crafted POST request to the /cgi-bin/device-management-utilities-internet.cgi diagnostics endpoint, producing full compromise (CVSS 8.8, AV:N/PR:L/UI:N with high confidentiality, integrity and availability impact). Exploitation requires valid web-management credentials plus network reachability to the management interface, which is normally LAN-side but escalates sharply if remote or WAN administration is enabled. No confirmed active exploitation has been observed and EPSS is low at 0.15% (5th percentile), although a public GitHub repository targeting this exact model and firmware version is cited in the CVE record, indicating technical exploitation material is publicly documented.
Stored OS command injection in the CloneSite plugin of AVideo (through version 29.0) lets an attacker who can plant a malicious SSH password - including through CSRF against an authenticated administrator - execute arbitrary shell commands as the crontab owner, commonly root or www-data, once the plugin's documented cron job runs. The CVSS 4.0 vector (AV:N/PR:N/UI:P) means unauthenticated remote attackers can trigger the chain but must socially engineer an already-authenticated administrator into submitting the crafted request, and exploitation also requires the CloneSite plugin to be enabled with its crontab installed plus one of two CSRF channels: a same-host TLS-terminating reverse proxy with $global['trustedProxies'] unset, or an attacker-controlled application co-hosted on the same hostname abusing the HTTPS SameSite=None session cookie. Default single-process Apache deployments are explicitly reported as not CSRF-exploitable, and no public exploit was identified at time of analysis, though the technical impact when the chain succeeds is full command execution with the injected payload persisted in the plugin configuration.
Command injection in Cisco Identity Services Engine (ISE) allows an authenticated, high-privileged remote administrator to execute arbitrary OS commands and escalate to root by sending a crafted HTTP request. The provided data identifies affected Cisco ISE software via CPE and notes that in single-node deployments exploitation can also render the node unavailable, causing a DoS condition that blocks unauthenticated endpoints from reaching the network until the node is restored. No public exploit identified at time of analysis; exploitation requires valid high-privileged administrative credentials, which sharply limits the threat despite the 9.1 CVSS score.
Command injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege credentials to inject and execute arbitrary commands, carrying a vendor-assigned CVSS of 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact and a Scope:Changed rating. The flaw was disclosed as one of multiple issues fixed in a grouped Cisco internal 'hardening release' advisory (cisco-sa-hardening-ndw1-psFvnrg) rather than a single externally reported CVE, so specific exploit prerequisites and exact affected version boundaries should be confirmed against that advisory's fixed-release table. Authentication is the primary limiting factor - the attacker must already possess valid low-privilege credentials or a session on the management interface - and no public exploit code or confirmed active exploitation was identified at time of analysis.
Command injection weaknesses in HP Linux Imaging and Printing Software (HPLIP) allow a local attacker to execute arbitrary operating-system commands with the privileges of the affected HPLIP component, resulting in high confidentiality, integrity, and availability impact (vendor CVSS 4.0 base 8.4) and spanning remote code execution, privilege escalation, denial of service, information disclosure, and unauthorized file modification. Exploitation is not remote: it requires local access to a Linux host that has HPLIP installed and in use, and it requires active user interaction, typically by inducing a legitimate user to feed attacker-controlled input into a vulnerable HPLIP component that builds an OS command (CWE-78). No authentication or elevated privileges are needed (PR:N), and no public exploit code or confirmed active exploitation was identified at time of analysis; HP has released remediation for the affected components in advisory HPSBPI04151.
Command injection in the REST API of Cisco ISE and ISE-PIC allows authenticated administrators to execute arbitrary commands with root privileges on the underlying operating system, potentially leading to complete node compromise and, in single-node deployments, a denial-of-service condition. This vulnerability (CVE-2026-20306) requires valid administrative credentials (PR:H) and network access to the management interface; no public exploit code has been identified at the time of analysis. The CVSS 3.1 base score is 9.1, driven by the high impact of root-level code execution and scope change from the web application to the OS.
Cisco ISE and ISE-PIC contain an OS command injection flaw (CWE-78) in their web-based diagnostic tools that lets an authenticated remote attacker with valid administrative credentials execute arbitrary commands and gain root on the underlying operating system. Because the attacker must already hold admin rights (PR:H), this is primarily a privilege-escalation and integrity-risk issue rather than an anonymous entry point, though the CVSS 3.1 score is 9.1 Critical (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) due to the scope change and full loss of confidentiality, integrity, and availability. On single-node deployments, successful exploitation can render the ISE node unavailable and block endpoints that have not yet authenticated from reaching the network, producing a denial-of-service condition; no public exploit code and no confirmed active exploitation were identified at time of analysis.
Command injection in SSH.NET's ScpClient (Renci.SshNet, all releases prior to 2026.0.0) lets a remote attacker who can influence the remote path supplied by a calling application execute arbitrary commands as the authenticated SSH user on a shell-based server. The default RemotePathTransformation.DoubleQuote cannot safely quote every remote command interpreter, so shell metacharacters that survive the transformation are parsed by the server's shell when the scp command line is assembled. Exploitation is conditional rather than automatic: the target must be a shell-based SSH server and the path must be crafted for that shell's parsing rules, and the assessed vector (AV:N/AC:H/PR:L/UI:N) requires an authenticated SSH session; no public exploit code or active exploitation has been identified at time of analysis, and applications using SftpClient, non-shell-based servers, or fully neutralizing transformations such as ShellQuote against POSIX shells are not affected.
Local privilege escalation in the Dell Update Package (DUP) Framework, versions prior to 26.07.03, allows a low-privileged user who already holds a foothold on the host to inject OS commands and gain elevated privileges (CVSS 3.1 base 7.8; vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The flaw is a CWE-78 command-injection issue that needs local access and no user interaction, and a vendor fix is available in version 26.07.03 per Dell advisory DSA-2026-417. No public exploit code has been identified at time of analysis, EPSS estimates exploitation likelihood at roughly 0.5% (42nd percentile), and CISA SSVC records no evidence of exploitation. This is a local-only elevation-of-privilege primitive, not a remotely reachable flaw, so exposure is limited to hosts where the DUP Framework is installed and invoked.
A high-privileged authenticated attacker can inject and execute arbitrary operating-system commands on the Ruijie RG-EW3000GX router running firmware EW_3.0(1)B11P380, through the user_list_note functionality that manipulates the Name argument resolved from /etc/rg_config/admin. The vulnerability is network-reachable and requires no user interaction, but the CVSS vector (PR:H) confirms it is only exploitable after obtaining administrator credentials for the device management interface, so anonymous internet attackers cannot reach it directly. Publicly available exploit code exists (a GitHub proof-of-concept for the RG-EW3000GX user_list_note flaw), which materially raises the likelihood of post-authentication abuse, particularly on routers whose management plane is exposed to the WAN or protected by weak/default admin passwords; no CISA KEV entry has been reported for this CVE.
OS command injection in the Ruijie RG-EW3000GX router (firmware EW_3.0(1)B11P380) lets an attacker who already holds a valid administrator session execute arbitrary shell commands on the device by injecting metacharacters into the data.url argument of a configChange request handled by the cc_set function in unifyframe-sgi.elf. Exploitation is remote and low-complexity once admin access is obtained, and publicly available exploit code exists (PoC disclosed via GitHub and VulDB), though there is no CISA KEV confirmation of active exploitation. Because the CVSS vector carries PR:H and the independent assessment confirms the configChange/cc_set path is not reachable pre-authentication, this is a real but privilege-gated vulnerability rather than an unauthenticated takeover.
Authenticated OS command injection in the web management interface of Advantech EKI-1242IEIMS and EKI-1242EIMS industrial gateways (reported in firmware V1.06.01) allows an attacker holding high-privilege management credentials to run arbitrary operating-system commands as root through crafted request parameters. Exploitation requires network reachability to the device's management plane plus valid privileged authentication (CVSS PR:H), after which a single low-complexity, no-interaction request yields full confidentiality, integrity, and availability impact on the appliance (assessed CVSS 3.1 base 8.8; vendor-published CVSS 4.0 score 8.6). Intelligence sources show no CISA KEV listing and no public exploit identified at time of analysis; the practical gate is that these OT edge devices are normally deployed on segmented industrial networks rather than internet-exposed, making management-plane reachability the limiting factor.
Unauthenticated OS command injection in the edgserver management service of Advantech EKI-1242EIMS and EKI-1242IEIMS gateways running firmware V1.06.01 lets remote attackers execute arbitrary operating-system commands with root privileges via crafted requests sent to TCP port 5058. No credentials or user interaction are required (CVSS 4.0 vector PR:N/UI:N, provider score 9.3; our independent CVSS 3.1 assessment is AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity and availability impact), and default configurations are affected. Exploitation is gated only by network reachability to the management port - there is no public exploit identified at time of analysis and the CVE is not in CISA KEV, but the issue is a genuine high-priority risk on any deployment where port 5058 is exposed beyond a trusted management segment.
OS command injection in the web management interface of the Advantech EKI-1242IEIMS and EKI-1242EIMS industrial gateways (firmware V1.06.01) lets an attacker who already holds high-privilege administrative credentials send a crafted HTTP request whose unsanitized parameters are passed into an OS command executed as root, yielding full compromise of confidentiality, integrity, and availability of the device. The attack is remote and low-complexity with no user interaction required, but it is access-gated: the CVSS 4.0 vector carries PR:H, so exploitation presupposes valid admin access to the management UI - no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV). Risk is materially amplified when the web interface is reachable from untrusted networks and protected only by default or weak credentials, a common condition for field-deployed industrial gateways.
OS command injection in the web management interface of Advantech EKI-1242IEIMS and EKI-1242EIMS industrial devices running firmware V1.06.01 lets a remote attacker who already holds a valid authenticated session on the management UI execute arbitrary operating system commands with root privileges through crafted request parameters. The vulnerability (CWE-78), reported by Nozomi Networks Labs, is rated 8.6 under CVSS 4.0 (our independent assessment maps it to 8.8 under CVSS 3.1, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), and the high PR:H value means the attacker must first authenticate - typically at administrator level - before the injection is reachable. There is no CISA KEV listing and no public exploit identified at time of analysis, so the practical risk is driven less by exploit popularity than by how broadly the device's management plane is exposed to untrusted networks.
Authenticated high-privileged users of Advantech EKI-1242IEIMS and EKI-1242EIMS industrial gateways running firmware V1.06.01 can execute arbitrary operating system commands as root through the device's web management interface, because crafted request parameters reach an OS command without proper neutralization (CWE-78, OS Command Injection). The vendor-assigned CVSS 4.0 score is 8.6 (AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H), reflecting network reachability and complete compromise of the device's confidentiality, integrity and availability with no user interaction, but exploitation deliberately depends on the attacker first holding valid administrative credentials on the management UI. Reported by Nozomi Networks Labs; no public exploit code and no confirmed active exploitation were identified at time of analysis, so the realistic risk is driven by whether the web interface is exposed and how tightly administrative access is controlled.
OS command injection in the web management interface of Advantech EKI-1242IEIMS industrial gateways (firmware V1.06.01) lets a remote authenticated attacker with high privileges execute arbitrary OS commands as root. Exploitation requires a valid high-privilege session (CVSS 4.0 PR:H) and network reachability to the management interface, but then yields full device compromise (VC:H/VI:H/VA:H). No public exploit or active exploitation has been identified at time of analysis.
OS command injection in the WNC T-Mobile 5G Box IDU router's portal.cgi password-change function allows an attacker who already holds high-privilege portal credentials and is positioned on the adjacent network to run arbitrary operating-system commands as root, yielding full device compromise (CVSS 4.0 base 9.3). The root cause is improper neutralization of shell metacharacters in the http_passwd_hidden and http_passwdConfirm_hidden parameters, so a crafted password-change request is interpreted by the underlying shell rather than treated as inert input. Only firmware below 1.1.0.651412 is affected and the issue is fixed in 1.1.0.651412; exploitation is constrained by AV:A (LAN/Wi-Fi-side reachability, not the public internet) and PR:H (valid admin credentials required first), and no public exploit identified at time of analysis.
Unauthenticated OS command injection in the WNC T-Mobile 5G Box IDU router (firmware below 1.1.0.651412) lets an attacker on the adjacent network run arbitrary shell commands as root through a crafted cli_cookie parameter POSTed to /cgi-bin/portal.cgi. Because the affected parameter is concatenated straight into a shell 'find' command with no sanitization, successful exploitation yields full root-level control of the device - high confidentiality, integrity, and availability impact - and the CVSS 4.0 score of 9.4 reflects that severity. The decisive limiting factor is reachability: the vector is AV:A (adjacent), so the attacker must already sit on the LAN/Wi-Fi side or the same L2 segment unless the management interface is exposed to the WAN. There is no CISA KEV entry and no public exploit code identified at time of analysis, but a vendor patch exists, and CERT-PL is credited with reporting the issue.
Authenticated OS command injection in the WNC T-Mobile 5G Box IDU router's web management portal lets an admin-level attacker on the adjacent network run arbitrary shell commands as root. The flaw (CWE-78) sits in the ping diagnostic feature of /cgi-bin/portal.cgi, where the ping_ip, ping_size, and ping_times POST parameters are concatenated into a system command without validation or sanitization; no user interaction is required once credentials are held. All firmware versions below 1.1.0.651412 are affected, and exploitation is constrained by two prerequisites - network reachability to the portal (AV:A, adjacent/local rather than internet-facing) and valid high-privilege (PR:H) portal access - so the practical risk, despite the 9.3 CVSS 4.0 base score, is bounded by the fact that the attacker must already be an authenticated admin on the local network segment. No public exploit code has been identified and the issue is not listed as confirmed actively exploited (CISA KEV) at time of analysis; CVE-2026-40855 was reported by CERT-PL and a vendor patch exists.
Command injection in the gRPC Network Security Interface (gNSI) Credentialz service of Arista EOS allows an authenticated, low-privileged attacker with access to the gRPC management endpoint to send a crafted request that modifies a target account's properties, potentially granting that account elevated privileges or broader access than an administrator intended (CVSS 4.0 base 8.6; assessed CVSS 3.1 8.6, AV:N/AC:L/PR:L/UI:N/C:H/I:H/A:N). Exposure is conditional: the device must be running an affected EOS maintenance train (4.30.0F through 4.36.0.1F) with gNSI Credentialz configured, a non-default management feature, and the attacker must already hold authenticated access to that endpoint, making this a privilege-escalation-from-foothold rather than an anonymous remote compromise. A vendor patch is available per the Arista advisory; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the issue is narrower in practice than the raw score suggests because of the configuration prerequisite.
Root-level remote code execution affects Pepperl+Fuchs ICE2/ICE3-series and Phoenix Contact IOL-MA8 IO-Link master gateways, where an unauthenticated attacker uploads a crafted IODD (IO Device Description) file that drops and executes an arbitrary shell script as root. The injected script survives reboot, granting persistent full control of the industrial device. No public exploit is identified at time of analysis and the CVE is not in CISA KEV, but the CVSS 9.8 rating reflects trivial network reachability and complete device compromise.
Command injection via the `/api/datastorage/data` REST API endpoint in Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL-MA8 IO-Link master devices allows an authenticated administrator to execute arbitrary OS commands with root privileges by sending a crafted HTTP PUT request. The flaw spans multiple hardware variants from both vendors and is disclosed across three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating broad impact across related product families. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
Command injection on Pepperl+Fuchs ICE2/ICE3 series IO-Link Master devices and OEM-equivalent variants (Phoenix Contact IOL-MA8, and others) allows an authenticated remote admin to execute arbitrary OS commands as root via a crafted GET request to the /api/datastorage/data endpoint. The vulnerability is reported across at least three separate CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating coordinated multi-vendor OEM disclosure spanning Pepperl+Fuchs, Phoenix Contact, and additional industrial automation suppliers. No public exploit code or active exploitation has been identified at time of analysis, but the industrial OT context raises availability and safety concern disproportionate to a purely IT risk framing.
Command injection in the web management API of Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and Phoenix Contact IOL MA8 enables an authenticated admin-level attacker to execute arbitrary OS commands as root via a crafted PUT request to the /api/iodd/config endpoint. All firmware versions of at least nine Pepperl+Fuchs ICE2/ICE3 hardware variants and the Phoenix Contact IOL MA8 PN DI8 are confirmed affected across three CERT@VDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028). No public exploit code or active exploitation is identified at time of analysis, but full root compromise of an industrial field device represents a significant ICS/OT risk.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and related Phoenix Contact hardware allows a remote attacker holding valid admin credentials to execute arbitrary OS commands with root privileges via a crafted GET request to the /api/iodd/config endpoint. The vulnerability is confirmed by three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating it spans multiple vendor product lines and firmware variants. No public exploit or active exploitation is identified at time of analysis, but root-level code execution on OT network edge devices represents a significant lateral-movement and persistence risk in industrial environments.
Command injection in the Pepperl+Fuchs ICE2/ICE3 IO-Link Master firmware - and functionally equivalent Phoenix Contact IOL-MA8 variants - allows a remote admin-authenticated attacker to achieve root-level OS command execution by sending a crafted DELETE request to the `/api/status/data` REST API endpoint. All currently listed firmware versions across the ICE2 and ICE3 product lines are affected, with no upper version bound in NVD CPE data. No public exploit code or CISA KEV listing has been identified at time of analysis, and the vendor-assigned CVSS 7.2 appropriately reflects the PR:H prerequisite that meaningfully gates exploitation to scenarios where admin credentials are already available to the attacker.
Command injection in Pepperl+Fuchs ICE2/ICE3 and Phoenix Contact IOL MA8 series IO-Link Master devices allows a low-privileged remote attacker to execute arbitrary OS commands with root privileges by sending a crafted GET request to the /api/status/data REST endpoint. Three separate CERTVDE coordinated advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028) indicate the same vulnerable firmware stack is shared across multiple industrial automation vendors, broadening the effective attack surface beyond any single manufacturer. No public exploit code or active exploitation has been identified at time of analysis.
Command injection via a PHP web management endpoint on Pepperl+Fuchs ICE2/ICE3 series IO-Link Masters and Phoenix Contact IOL_MA8_PN_DI8 allows an authenticated operator-level attacker to execute arbitrary OS commands with root privileges on the device. The vulnerable endpoint, `/index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files`, passes user-supplied filenames to an underlying OS command without sanitization, enabling full device compromise. No public exploit code or KEV listing has been identified at time of analysis, but the low attack complexity and network accessibility make this a serious risk in OT/ICS environments.
Command injection via the PHP-based IODD parameter save endpoint on Pepperl+Fuchs ICE2/ICE3 series IO-Link masters and OEM-equivalent devices allows an authenticated operator-level attacker to execute arbitrary OS commands with root privileges on the device. Affected hardware includes multiple ICE2 and ICE3 form-factor variants from Pepperl+Fuchs and the Phoenix Contact IOL MA8 PN DI8, with additional OEM-labeled variants covered under three separate CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices (and OEM variants from Phoenix Contact and others) allows a low-privileged authenticated remote attacker to execute arbitrary OS commands with root privileges via the PHP-based /index.php/ajax/parameterManage endpoint. The flaw is tracked across three CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028), indicating the vulnerable firmware is shared across multiple vendor rebrand families. No public exploit has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
Command injection via the Field_Shadow_Password class in Pepperl+Fuchs ICE2/ICE3 IO-Link master devices and Phoenix Contact IOL_MA8_PN_DI8 allows a network-authenticated attacker holding only operator-level credentials to inject OS commands that execute with root privileges on the device. The vulnerability (CWE-78) is exploitable without user interaction against a low-privileged account, resulting in full confidentiality, integrity, and availability compromise of the affected industrial device. No public exploit code or CISA KEV listing has been identified at time of analysis; three coordinated CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028) cover multiple vendor families sharing the same underlying platform.
Command injection in Pepperl+Fuchs ICE2/ICE3 series and Phoenix Contact IOL_MA8 IO-Link master devices enables an authenticated low-privileged attacker to execute arbitrary OS commands as root via the /index.php/attached_devices_tab/do_upload web management endpoint. The vulnerability (CWE-78) is exploitable remotely without user interaction using only operator-level credentials, yielding full device compromise including confidentiality, integrity, and availability of the industrial gateway. No public exploit code or CISA KEV listing has been identified at time of analysis, though three separate CERTVDE advisories (VDE-2026-014, VDE-2026-027, VDE-2026-028) indicate coordinated multi-vendor disclosure.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices and OEM equivalents allows a low-privileged authenticated attacker to execute arbitrary OS commands as root via the /index.php/ajax/get_iodd_port_info PHP endpoint. Affected hardware spans multiple ICE2 and ICE3 form factors (G65L, K45P, K45S housings) as well as Phoenix Contact IOL MA8 and additional OEM-branded variants sharing the same firmware. No public exploit code has been identified at time of analysis, but the low attack complexity and high impact make this a credible priority in any industrial network where these devices are reachable.
Command injection in Pepperl+Fuchs ICE2/ICE3 IO-Link Master devices (and OEM equivalents from Phoenix Contact and others) allows a low-privileged authenticated attacker to execute arbitrary OS commands as root via the PHP endpoint /index.php/ajax/get_iodd_menu_info. Any valid user or operator account - the lowest access tiers on the device - is sufficient to achieve full device compromise. No public exploit has been identified at time of analysis, but the vulnerability is straightforward (CWE-78) and reported across three separate CERTVDE advisories covering multiple vendor SKUs, indicating a shared firmware base.
Command injection in Arista EOS-based products lets an authenticated user of the gRPC Network Security Interface (gNSI) Certz service escalate privileges and run arbitrary OS commands as root by sending a crafted Certz Rotate request, resulting in full device compromise; the Bootz service is affected by the same flaw. The issue is a CWE-78 OS command injection reported by Arista and carries a CVSS 4.0 base score of 9.4. There is no public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV.
OS command injection in Arista VeloCloud Edge management and configuration workflows allows input supplied through those workflows to be interpreted as an operating-system command, resulting in command execution with elevated privileges on the appliance. Exploitation requires a high-privileged management request or the ability to write a configuration value, so this is primarily a privileged-insider, compromised-admin-account, or post-compromise escalation risk rather than an unauthenticated internet-facing flaw. No public exploit code or active exploitation has been identified at time of analysis, and no EPSS score was supplied with the record.
Netcore NR255-V routers running firmware 1.5.130703 build root-privileged shell command lines from unquoted DDNS configuration input in DDNSset_cgi.c and related ddns_Proc.c code, letting an authenticated administrator inject extra command arguments that execute as root. Successful abuse yields complete device compromise, including configuration theft, traffic interception, and use of the router as a foothold into the LAN. The CVSS 4.0 vector indicates network reachability with high prerequisites, and no public exploit code or CISA KEV entry was present at time of analysis; the public technical reference writeup is the main disclosure vehicle.
Authenticated attackers can inject crafted arguments into the tcpdump launch routines exposed by the Nettools feature of Netcore NR255-V firmware 1.5.130703, causing the device to execute attacker-manipulated system commands as part of the tcpdump invocation. The flaw affects multiple CGI/handler components — ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default and ntools_proc — and carries a CVSS 4.0 base score of 8.7 (AV:N/AC:L/PR:L/UI:N) with high confidentiality, integrity and availability impact confined to the device itself. Exploitation requires a low-privileged foothold on the router's management interface, and no public exploit code, EPSS score, or CISA KEV listing was supplied in the available intelligence.
Rsbuild versions before 2.0.9 contain a command injection flaw in the developer-server browser-launcher on macOS. The openBrowser() helper in packages/core/src/server/open.ts passes a URL through encodeURI() and then interpolates it into a string handed to child_process.exec(), and because encodeURI() leaves characters such as $, (, ), and ; untouched, a crafted URL is evaluated by /bin/sh and can execute arbitrary operating-system commands with the privileges of the developer running the dev server. The issue was fixed in the 2.0.9 release (upstream PR 7789), so a vendor-released patch is available; no CISA KEV listing or public exploit code was present in the supplied intelligence, and the attack requires local conditions on the developer machine.
Authenticated attackers holding administrative access to the management plane of HPE Networking EdgeConnect SD-WAN Gateways can supply crafted input to an affected component and achieve arbitrary command execution as root. The flaw affects multiple released trains — 9.4.x up to 9.4.8.2, 9.5.x up to 9.5.8.1, 9.6.x up to 9.6.3.1, and 9.7.0.0 — with a CVSS base score of 7.2 reflecting the high privilege prerequisite against total loss of confidentiality, integrity, and availability. There is no CISA KEV entry, no EPSS score, and no public exploit code identified at time of analysis, so this is currently a high-impact but credential-gated risk rather than an actively exploited one.
Authenticated command injection in the command-line interface of HPE Aruba EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privileged CLI credentials to break out of the appliance shell and execute arbitrary commands on the underlying operating system, resulting in complete compromise of the gateway. The flaw affects the 9.4.x, 9.5.x, 9.6.x and 9.7.x maintenance streams (9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1 and 9.7.0.0) and carries a vendor-assigned CVSS of 9.1 with a scope change from the CLI component to the host OS. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied, so the practical priority is driven by exposure of the management CLI rather than by evidence of active exploitation.
Command injection in the GitHub Actions workflow shipped with githubtoplanguages (versions before 1.1.4) lets anyone who can open an issue on a repository running the bundled discord-issue.yml workflow execute arbitrary shell commands on the Actions runner. The issue title is expanded by GitHub Actions directly into a Bash assignment, so a title containing $(...) command-substitution syntax is evaluated by the shell before the value is posted to Discord; a public proof-of-concept was demonstrated by the reporter in a fork. A successful injection can spoof trusted bot notifications and may expose the configured DISCORD_WEBHOOK secret or other workflow environment data, and remediation is available in version 1.1.4 / commit 6bf9c3a9cb66c937b9047ca266b3d02f2bb11027.
Authenticated remote code execution in GitLab Enterprise Edition (Advanced Search / Elasticsearch indexing) allows a user with project-import rights to overflow a Unicode conversion buffer by importing a specially crafted Git project export, resulting in arbitrary command execution on the GitLab server. All EE versions from 12.3 through 19.1.8, plus 19.2 before 19.2.6 and 19.3 before 19.3.2, are affected under configurations where Advanced Search is enabled. Publicly available exploit code exists and the HackerOne report is referenced, making this a high-priority patching target for internet- or partner-exposed GitLab EE instances, though exploitation requires an authenticated account and a non-default Elasticsearch-backed search configuration.
Authenticated users holding only read-only (reader) privileges on an ArcadeDB database can escalate to arbitrary JVM scripting by POSTing a {"language":"js"} command to /api/v1/command/{database}, because the polyglot query engine never applies the database-administrator authorization check enforced on the SQL/Cypher paths. A cooperating sandbox flaw lets those scripts reflect from the bound database object through database.getClass().getClassLoader().loadClass to classes outside the allowedPackages whitelist, allowing an attacker to read arbitrary host files such as /etc/passwd and configuration files outside the database scope. Process creation remains blocked, so OS command execution is not confirmed; exploitation needs valid credentials and no user interaction, the flaw is fixed in ArcadeDB 26.7.1, and no public exploit code or CISA KEV entry was identified at time of analysis.
Flowise releases prior to 3.1.4 ship GitHub Actions workflows that interpolate workflow_dispatch inputs such as tag_version and node_version directly into shell run blocks, allowing OS command injection during Docker image builds. The flaw is reachable only by a user who already holds write access to the repository (CVSS 4.0 PR:H), but the payoff is large: arbitrary command execution on the build runner with access to AWS credentials and Docker Hub tokens. No public exploit code or CISA KEV entry was reported at time of analysis, and the vendor has published a fix in 3.1.4 via GitHub Security Advisory GHSA-jrcq-qjw5-xx5q; note that this is a supply-chain/CI risk to the project's own build pipeline and to forks that reuse these workflows, not a runtime flaw in deployed Flowise instances.
Authenticated remote code execution in Flowise versions before 3.1.4 lets a low-privileged user who can create or edit a Custom MCP node run arbitrary code on the Flowise server by supplying attacker-controlled npm package names in the mcpServerConfig parameter, which Flowise then invokes through npx. The issue carries a vendor-published CVSS 4.0 score of 9.0, while our independent assessment rates it CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (8.8), reflecting that the attacker must first hold a valid Flowise account with access to the node editor - no pre-authentication path was identified. No public exploit code was identified at time of analysis and the vulnerability has not been confirmed actively exploited (no CISA KEV listing), so risk is driven mainly by how many users can reach the MCP node configuration UI and whether the instance is internet-facing or uses weak or shared credentials.
Agent-coderag versions up to and including 1.3.0 execute a repository-supplied Gradle wrapper during the default `agent-coderag sync` dependency-discovery flow, letting an attacker who plants a malicious `gradlew` in a Gradle project run arbitrary code with the victim's operating-system privileges. The flaw is a command-injection design error (CWE-78) in `code_rag/core/manager.py`, where a repository-local `gradlew` is unconditionally preferred over the system `gradle` binary and passed to `asyncio.create_subprocess_exec`; CVSS 3.1 base 8.6 with user interaction required (UI:R) because the victim must index the hostile repository. Upstream fixed the issue in 1.3.1 by using only the PATH-resolved system `gradle`; no public exploit code has been identified and the CVE is not in CISA KEV at time of analysis.
Unauthenticated OS command injection in the ping.php endpoint of Trexom's TrxTimeATTENDANCE (versions 1.0.5 through 1.9.5, fixed in 1.9.6) allows any remote attacker who can reach the endpoint to execute arbitrary operating-system commands and obtain remote code execution with the privileges of the web server process. The flaw, classified CWE-78 and scored 9.3 under CVSS 4.0, is remotely exploitable with no authentication or user interaction (PR:N/UI:N/AC:L), and publicly available exploit code exists, elevating the risk for any instance exposed beyond a trusted LAN. CISA's SSVC assessment records exploitation as 'none' at time of analysis (no KEV listing), but the total technical impact and full automatability make this a high-priority patch item for the niche organizations running this time-and-attendance application.
Arbitrary command execution in the npm TypeScript package praisonai (versions 1.5.1 through 1.7.1) allows an attacker who can influence the string passed to the exported shell() helper to break out of its read-only allowlist by prefixing an approved command and appending a second one with shell chaining syntax such as 'echo ok; <payload>'. Because utility-tools.ts validates only the first whitespace-delimited token and then hands the complete original string to Node's child_process.exec(), the injected command runs with the PraisonAI process privileges. The flaw is fixed in 1.7.2; the advisory includes a deterministic local proof-of-value, and there is no CISA KEV listing or EPSS data indicating active exploitation at time of analysis.
Ar
A command injection flaw in the WSO2 Integrator MI extension for Visual Studio Code lets a crafted Micro Integrator project run arbitrary operating system commands when its unit test execution flow is triggered. Exploitation is not remote or silent: the developer must open the untrusted project, explicitly grant it workspace trust, and then run the project's unit tests, after which injected commands execute with the privileges of the VS Code user (CVSS 3.1 base 7.0, AV:L/AC:H/PR:N/UI:R). Impact is therefore bounded by the developer workstation's account privileges, and no public exploit code or active exploitation is indicated in the available intelligence.
OS command injection in the Lite-On FlexFi 5G radio products FF-RFI079I4 and FF-RFI078I4 allows anyone who can authenticate to the device's M-Plane (NETCONF) management interface to run arbitrary operating-system commands with the privileges of the management service, leading to full compromise of the radio unit. Affected firmware is version 02.01.15 and earlier; Lite-On has released a fix. EPSS is low (1.03%, 62nd percentile) and CISA's SSVC rates exploitation as 'none' with automatable 'no', so this is currently a targeted-risk rather than a mass-exploitation issue, with no public exploit identified at time of analysis.
OS command injection in EFM ipTIME C200E firmware 1.094 allows an authenticated remote attacker with administrative privileges to execute arbitrary operating system commands via a crafted request to the iux_set.cgi endpoint in the System Setup component. A public proof-of-concept exploit, including a video demonstration, has been disclosed. No patch has been confirmed at time of analysis. No public exploit identified at time of analysis as confirmed active exploitation (CISA KEV status absent), though the POC lowers the bar for exploitation significantly.