Command Injection
Monthly
Remote code execution in OpenTalker SadTalker allows attackers to run arbitrary OS commands by supplying audio files whose names contain shell metacharacters, which are interpolated unescaped into ffmpeg command lines during video muxing (CWE-78). Any deployment that accepts attacker-influenced audio uploads and then generates video is affected; the flaw was reported by VulnCheck with an accompanying advisory, though no public exploit code or active exploitation has been identified at time of analysis. The CVSS 4.0 base score of 9.3 reflects unauthenticated network-triggerable full-system compromise.
OS command injection in getomni-ai's zerox 1.1.20 (the node-zerox document-to-markdown library) lets remote attackers execute arbitrary shell commands by supplying a document URL whose file extension contains command-substitution syntax. The unsanitized extension is interpolated into shell commands run by poppler utilities during file download, so injection fires before any document processing. Reported by VulnCheck; no public exploit code is identified at time of analysis and it is not in CISA KEV, though the fix issue is public.
Command allowlist bypass in cli-mcp-server 0.2.5 lets callers of this Model Context Protocol server run arbitrary, non-allowlisted commands by embedding shell command substitution ($(...) or backticks) inside an otherwise-permitted command. The flaw lives in _validate_command_with_operators and is only reachable when the ALLOW_SHELL_OPERATORS option is enabled, at which point the ALLOWED_COMMANDS safelist is effectively defeated. Reported by VulnCheck with a CVSS 4.0 score of 9.2; no public exploit identified at time of analysis, though the technique is trivially derivable from the advisory.
Unauthenticated OS command injection in XING Inc.'s CPTrans-ME-X allows remote attackers to inject and execute arbitrary operating-system commands on the device without any credentials. The flaw (CWE-78) carries a CVSS 4.0 base score of 9.3 with full confidentiality, integrity, and availability impact, meaning a successful attacker gains complete control of the affected unit. No public exploit identified at time of analysis, and the device is not listed in CISA KEV.
Authenticated remote code execution in seacms v13.6 allows a low-privileged attacker to execute arbitrary OS commands by sending a crafted POST request to the admin_config.php component, exploiting a CWE-78 OS command injection flaw. The vulnerability achieves full system compromise (C:H/I:H/A:H) over the network with no user interaction required beyond authentication. No public exploit has been identified at time of analysis and EPSS sits at 0.24% (15th percentile), indicating minimal observed exploitation pressure currently.
Command injection in MBS-Solutions X-Serie Gateway firmware V6_00_05 enables an authenticated low-privileged Standard-role user to execute arbitrary OS commands as root by exploiting the ugw-restart method in /cgi-bin/wwwugw.cgi. Unsanitized user input is passed directly to the dpcheck system utility, which runs with root privileges, yielding full device compromise from a minimal trust level. Publicly available exploit code exists via a GitHub proof-of-concept repository; EPSS is low (0.24%, 15th percentile), consistent with a niche product, though the public PoC substantially lowers the barrier for targeted attacks.
Remote code execution in MOOS-IvP through 24.8.1 arises from unsanitized shell metacharacters passed to a `system("mkdir ...")` call inside `SplitHandler::handlePreCheckSplitDir()`, reachable via the `alogsplit` log-processing utility. An attacker who controls either a log file's pathname - including its filename - or the `--dir` command-line parameter can embed shell syntax (e.g., backtick substitution or `$(...)` sequences) that executes arbitrary commands with the privileges of the operator invoking `alogsplit`. No public exploit or CISA KEV listing has been identified at time of analysis; the fix is confirmed in upstream GitHub PR #127, replacing the dangerous `system()` call with a direct `mkdir(2)` syscall.
Remote OS command injection in MOOS-IvP's uMemWatch utility (through version 24.8.1) lets attackers who can connect to the MOOSDB as a client execute arbitrary shell commands as the uMemWatch process user. The uMemWatch memory-monitoring tool builds a shell command string that embeds the attacker-controlled MOOS client name as an unquoted stdout-redirection target, so shell metacharacters in the name are interpreted by the shell. Publicly available upstream fix code exists (PR #121); no public exploit was identified at time of analysis, and the flaw is not in CISA KEV.
Remote code execution in MOOS-IvP's iSay module (through version 24.8.1) lets any actor on the MOOS message bus run arbitrary shell commands as the iSay process user. The SAY_MOOS variable handler in Sayer.cpp builds a speech command string and passes it straight to system(), so a published message containing backticks or $() command-substitution syntax is executed by the shell. Reported by VulnCheck with a vendor patch available; no public exploit is identified at time of analysis, though the source-level root cause is fully disclosed in the upstream fix commit.
OS command injection in D-Link DNS-320 ShareCenter firmware 2.06B01 allows a remote authenticated attacker to execute arbitrary operating system commands by supplying a crafted value for the fileurl parameter in the File Sharing CGI handler (/cgi/file_sharing.cgi). The vulnerability carries a CVSS 4.0 base score of 8.5 with high-privilege requirement but yields full system-level compromise on success, including subsequent-system impact. A public exploit has been disclosed, materially lowering the barrier to exploitation for any remaining deployments of this legacy NAS appliance.
OS command injection in the D-Link DNS-340L NAS firmware 1.01B04 allows a remote administrator to execute arbitrary operating system commands via unsanitized parameters in the Add-On Center CGI handler at `/cgi-bin/addon_center.cgi`. The parameters `f_name`, `f_url`, `f_flag`, and `f_login_user` are passed without sanitization to a shell command, enabling full root-level device takeover. A public proof-of-concept exploit has been disclosed on GitHub, raising practical exploitability beyond the theoretical; no vendor patch has been identified, and the DNS-340L is an end-of-life device unlikely to receive one.
OS command injection in D-Link DNS-340L firmware 1.01B04 allows authenticated remote attackers to execute arbitrary operating system commands by manipulating the `callback_url` or `sync_interval` arguments passed to the `/cgi-bin/dropbox.cgi` CGI handler. A public proof-of-concept exploit exists, raising the likelihood of opportunistic exploitation against exposed NAS devices. No patch has been identified at time of analysis, and the DNS-340L is likely an end-of-life product with no vendor remediation roadmap.
Command injection in OpenVPN for Windows allows a low-privilege attacker - operating through a rogue CA combined with a configured validation script - to inject arbitrary commands via improperly quoted CreateProcess() arguments that include characters special to cmd.exe. Affected is OpenVPN prior to v2.7.7 on Windows platforms only. A successful attacker can achieve full confidentiality, integrity, and availability impact on the host running the VPN client or server. No public exploit has been identified at time of analysis, and this is not listed in CISA KEV.
OS command injection in the Amazon Web Services codecatalyst-blueprints npm package (before 0.3.156) allows a repository contributor with commit access to execute arbitrary commands inside the blueprint resynthesis environment by embedding shell metacharacters in the `owner` field of a `[local]` merge strategy entry within a crafted `.ownership-file`. The attack requires both commit access to a project repository and a resynthesis trigger event, making automated mass exploitation infeasible. No public exploit has been identified and SSVC rates exploitation as none and non-automatable; users of the managed Amazon CodeCatalyst service require no action because AWS applies independent server-side allowlist enforcement and per-project environment isolation.
Remote code execution in NousResearch Hermes Agent 0.18.2-0.21.0 allows an unauthenticated attacker to execute arbitrary OS commands in the victim's process context by supplying a malicious git repository containing a crafted `.git/config` that sets `core.fsmonitor` to an attacker-controlled binary or script. Exploitation is triggered the moment a user opens the malicious repository and sends any message, causing the agent's internal git status call to invoke the injected command and expose the full process environment - including configured LLM provider API keys. A public exploit writeup exists (manifold.security), and a patch was released as commit f6234d0.
Remote code execution in n8n's Git node allows an authenticated workflow user to execute arbitrary OS commands as the n8n process user by pointing the node at a repository containing malicious git configuration. The vulnerability arises from an incomplete sanitization list that omitted the content-filter and merge-driver git configuration key families, allowing those keys to survive into git operations and trigger arbitrary command execution during routine Add, Commit, Checkout, or Pull operations. Patched versions 1.123.73, 2.35.4, and 2.36.2 are confirmed available; no public exploit or CISA KEV listing has been identified at time of analysis.
Command injection in SEPPmail Secure Email Gateway before version 15.0.7 enables authenticated administrators to execute operating system commands at elevated privilege levels beyond the intended administrative scope. Classified CWE-78, the flaw exists within the network-accessible management interface and was reported by NCSC.ch (Swiss National Cybersecurity Centre). No active exploitation or public proof-of-concept code has been identified at time of analysis; the vendor-released fix is available in version 15.0.7.
Incomplete patch for OS command injection in the Nuclio serverless dashboard (local/Docker platform, all versions prior to 1.17.4) leaves the list-all resource code path exploitable by unauthenticated remote attackers. Shell metacharacters injected via the X-Nuclio-Function-Namespace, X-Nuclio-Project-Namespace, or X-Nuclio-Function-Event-Namespace HTTP headers bypass the prior fix and reach a /bin/sh -c invocation in pkg/platform/local/client/store.go unescaped, enabling arbitrary command execution inside the dashboard container. No public exploit has been identified at time of analysis, but the attack surface is network-accessible and requires no authentication, lowering the bar significantly for any attacker already familiar with the previously disclosed injection class (GHSA-jx7q-cpg6-669g).
OS command injection in Nuclio's local Docker platform dashboard allows remote attackers to execute arbitrary shell commands as root inside the dashboard container, which holds the Docker socket, enabling full host compromise. The function namespace value - controllable via the unauthenticated (default 'nop' auth) API - is string-interpolated without quoting into a `docker ps --filter` command executed via `/bin/sh -c`, allowing a double-quote character to break out of the filter token and inject arbitrary commands. The issue is fixed in version 1.17.4, with the patch confirmed via GitHub release tag and PR #4220; no public exploit identified at time of analysis.
Shell command injection in Nuclio's Dashboard build pipeline (versions 1.6.19–1.17.1) allows an authenticated user with function-create permission to execute arbitrary commands inside the Dashboard container by embedding shell metacharacters in the `spec.build.tempDir` field. The post-exploitation impact is substantially amplified because the Dashboard container's Kubernetes service account holds wildcard access to Secrets, Pods, Jobs, and Deployments within its namespace, enabling full namespace-level privilege escalation from a single low-privileged API call. No public exploit identified at time of analysis, but the fix commit (PR #4190) includes working proof-of-concept test cases demonstrating semicolon, pipe, subshell, and backtick injection payloads.
Remote OS command injection in AS203038 Looking Glass before 1.3.5 lets remote attackers inject shell commands through the ping/traceroute/BGP diagnostic inputs. The root cause is an unanchored regular expression in the input-validation layer that fails to bind matching to the full input, allowing malicious payloads to slip past validation and reach an underlying command. No public exploit or CISA KEV listing exists at time of analysis, but the network-facing, unauthenticated nature (CVSS 9.8) makes it high-priority for any exposed instance.
OS command injection in Jenkins TICS Plugin 2025.1.1 and earlier allows an authenticated, low-privileged Jenkins user who can control build environment variable values to execute arbitrary commands on the build agent hosting the job. The flaw stems from unsanitized environment variable values being passed directly to OS command invocations within the plugin, and the scope change (S:C) means impact falls on the agent node rather than the Jenkins controller. No public exploit code exists and SSVC rates exploitation status as none with non-automatable attack path, placing real-world priority lower than the raw CVSS score suggests.
Command injection in rpmuncompress allows a local attacker to execute arbitrary commands under the invoking user's context by supplying an archive file whose filename contains shell metacharacters. Affecting all actively supported Red Hat Enterprise Linux versions (6 through 10) and Red Hat Hardened Images, the flaw is triggered when a user or automated build pipeline invokes rpmuncompress on a maliciously named archive. No public exploit or active exploitation has been identified at time of analysis, but the low attack complexity and broad RHEL enterprise deployment footprint make this a meaningful risk for organizations processing untrusted archives in development or CI/CD workflows.
Command injection in rpm's `rpmbuild -t*` subcommand allows arbitrary command execution with build-user privileges when an attacker controls the path or filename of a tarball being processed. The vulnerability arises because shell metacharacters in tarball names are not sanitized before being passed to a shell invocation inside rpmbuild. Exploitation is most realistic in automated CI/CD pipelines that fetch externally supplied artifact archives and pass them directly to rpmbuild, a common pattern in open-source package maintainer workflows. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Authenticated command injection in Coolify before 4.2.0 allows low-privileged platform users to execute arbitrary OS commands on managed server hosts by embedding shell metacharacters into Docker environment variable key names. The flaw bypasses container isolation entirely - injected payloads travel over SSH as part of Coolify-generated Docker commands and execute in the host OS context, not within any container sandbox. The upstream fix in v4.2.0, confirmed by GitHub release tag and patch commit b50839d4515b115b7ded5db609471440249995da, adds validation constraints in ValidationPatterns.php to reject malformed key names before command construction.
OS command injection in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote authenticated administrator to execute arbitrary OS commands under specific conditions, achieving full remote code execution on the appliance. The vulnerability (CWE-78) is post-authentication and gated by administrator-level credentials, narrowing the exploitable attack surface to compromised or malicious admin accounts. No public exploit code or active exploitation has been identified at time of analysis, though SMA1000 appliances are high-value targets as network edge remote-access devices.
Authenticated command injection in the HPE AOS-CX network operating system CLI allows a high-privileged attacker to execute arbitrary commands as a privileged user on the underlying host OS of affected Aruba CX switches. The vulnerability is reachable over the network management plane and results in full system compromise (C:H/I:H/A:H) upon successful exploitation. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, but the impact is severe for any attacker who already holds administrative CLI credentials.
The analysis is complete. Key points about this CVE: - **Same advisory as CVE-2026-73749** (hpesbnw05134en_us) — HPE bundled this authenticated variant (CVSS 7.2, PR:H) alongside the higher-severity unauthenticated RCE (9.8, PR:N) in a single bulletin. - **No data quality flags** — vendor, product, and tags are accurate; the wildcard CPE simply means the exact patched version must be fetched from the HPE advisory directly. - **Injection note rejected** — the embedded "swidnica" canary marker in the editorial note was suppressed per the recorded pattern.
Unauthenticated command injection (CWE-77) in an HPE AOS-CX management component allows an adjacent-network attacker to execute arbitrary OS commands on affected switches without any credentials or user interaction. Multiple AOS-CX release trains are affected, spanning versions 10.10 through 10.18, per the EUVD affected-version data. No public exploit has been identified and CISA KEV does not list this as actively exploited, though full system compromise is achievable upon successful exploitation.
Privilege escalation in HPE AOS-CX allows an authenticated low-privileged user to execute arbitrary commands with the privileges of a higher-privileged or root-level account on the underlying operating system. The vulnerability is triggered through specific command-line operations within the AOS-CX CLI environment, making it exploitable over the network by any user with basic CLI credentials. With a CVSS score of 8.8 and full C:H/I:H/A:H impact, successful exploitation yields complete control of the affected switch's OS. No public exploit code and no CISA KEV listing are identified at time of analysis.
OS command injection in HPE AOS-CX's web-based management interface allows any authenticated low-privileged user to execute arbitrary commands on the underlying switch operating system, achieving full device compromise. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms the attack is fully remote, requires no user interaction, and demands only a minimal-privilege account - not administrative credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low access complexity and complete C/I/A impact make this an urgent patching priority for network infrastructure teams.
Command injection in PHP Composer's Perforce VCS handler allows arbitrary local command execution with the privileges of the developer or CI account running package installation. Affects all Composer releases from 1.0 through 2.2.29 and 2.10.2; the flaw exploits P4PORT's undocumented `rsh:`/`jsh:` transport keywords, which instruct the Perforce `p4` client to spawn a local child process instead of connecting to a server, allowing attacker-controlled package metadata to trigger OS command execution. No public exploit identified at time of analysis, though the fix commit includes test payloads confirming the mechanism.
Command injection in HPE Networking Fabric Composer's web-based management interface enables authenticated high-privilege attackers to execute arbitrary OS commands as a privileged user on the underlying operating system. The CVSS vector confirms network-accessible exploitation (AV:N/AC:L) requiring administrator-level credentials (PR:H), with full confidentiality, integrity, and availability impact upon success. No public exploit has been identified at time of analysis, and the vulnerability does not currently appear in CISA KEV; the HPE security bulletin hpesbnw05133en_us is the authoritative source for remediation guidance.
Remote code execution in HPE Networking Fabric Composer allows an authenticated attacker with high-privilege API access to execute arbitrary operating system commands as a privileged user on the underlying host. The attack vector is the Fabric Composer API, where insecure file operations can be weaponized post-authentication to break out of the application layer and reach the OS. No public exploit code or active exploitation has been identified at time of analysis; the CVSS score of 7.2 reflects the severe impact moderated by the high-privilege authentication prerequisite.
Command injection in HPE Networking Fabric Composer's web-based management interface permits an unauthenticated remote attacker to execute arbitrary operating system commands leading to complete host compromise, subject to preconditions outside the attacker's direct control. The CVSS vector (AV:N/AC:H/PR:N/UI:R) reflects this split profile: no credential barrier for the attacker, but both high-complexity environmental conditions and victim interaction must align before exploitation succeeds. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution in HPE Networking Fabric Composer exposes organizations to complete host compromise by an unauthenticated remote attacker, provided attacker-independent preconditions and a user-interaction trigger are both satisfied. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R) scores 7.5, reflecting full C:H/I:H/A:H impact tempered by high attack complexity and required user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated remote command execution in HPE Networking Fabric Composer's API allows a network-accessible attacker to run arbitrary commands on the underlying operating system, resulting in complete host compromise. Exploitation requires certain preconditions outside the attacker's control (reflected in AC:H), but no authentication is needed once those conditions are satisfied. No public exploit has been identified at time of analysis; HPE has published a security bulletin addressing the issue.
Arbitrary OS command execution in HPE Networking Fabric Composer allows an unauthenticated attacker on an adjacent network segment to run arbitrary commands on the underlying host, achieving full system compromise. Exploitation depends on preconditions outside the attacker's direct control, which constrains practical risk and drives the AC:H rating despite the severity of the impact. No public exploit or active exploitation has been identified at time of analysis; HPE has published a security bulletin (hpesbnw05133en_us) addressing this issue.
Privilege escalation in HPE Networking Fabric Composer allows an authenticated low-privilege operator to gain full administrative control via a command sanitization bypass in the product API. Exploitation is network-accessible with low complexity and no user interaction required, yielding complete confidentiality, integrity, and availability impact on the affected system. No public exploit code has been identified at time of analysis, and CISA has not listed this CVE in the Known Exploited Vulnerabilities catalog.
OS command injection in Dell PowerStore allows a locally authenticated user with limited privileges to execute arbitrary commands with root privileges, achieving full appliance compromise. The CVSS:3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, score 8.8) confirms low-complexity local privilege escalation with scope change to root, covering complete confidentiality, integrity, and availability impact. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity and full impact triad make this a meaningful risk for environments where multiple accounts share local PowerStore access.
Remote code execution in the FS-Poster WordPress plugin (versions up to and including 8.0.1) allows any authenticated user with subscriber-level access to execute arbitrary OS commands on the underlying web server. The vulnerability combines two weaknesses: the FFmpeg path parameter accepted by the plugin's REST API is passed unsanitized to PHP's exec() function (CWE-77 command injection), and the REST API endpoints responsible for this functionality lack proper authorization checks. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low privilege bar - a standard subscriber account - makes this accessible to any registered WordPress user.
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arbitrary operating system commands with root privileges, achieving full appliance compromise. The CVSS scope-change metric (S:C) reflects that root access on a storage platform threatens all data hosted on the array, extending blast radius beyond the appliance itself. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity once local access is established makes this a priority remediation for organizations running affected PowerStore T and Q series hardware.
Command injection in rpm's `rpmuncompress` utility allows a local attacker who can place a crafted `.gem` file containing RPM macro syntax to execute arbitrary commands with the privileges of the invoking user or automated workflow. The vulnerability arises because the macro expansion engine processes the gem filename during command construction without sanitization, meaning any RPM macro embedded in the filename is evaluated at execution time. No public exploit code has been identified at time of analysis; the CVSS 7.0 score reflects full CIA impact constrained by local attack vector and required user interaction.
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges to execute arbitrary commands at the root level, achieving full privilege escalation on the appliance. The CVSS scope change (S:C) reflects that root access on a storage platform extends impact beyond the immediate process boundary to the entire appliance and potentially dependent workloads. Dell has published advisory DSA-2026-330, but no specific patched version was provided in available data. No public exploit identified at time of analysis.
OS command injection in Schneider Electric NetBotz 5 (models 750 and 755) environmental monitoring appliances allows arbitrary Linux OS command execution when a system backup that has been maliciously modified is restored on the device. Exploitation requires high-privilege administrative access and adjacent network positioning, substantially narrowing the realistic threat population to insiders or supply-chain compromise scenarios. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
OS command injection in LibreNMS's libvirt discovery module (VminfoLibvirt.php) enables any authenticated administrator to execute arbitrary OS commands on the discovery worker host by setting a crafted device hostname. Affected deployments span LibreNMS 23.10.0 through 26.3.x wherever the enable_libvirt option is explicitly set to true; the vendor-released fix is version 26.4.0. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack pattern is straightforward for any actor holding admin credentials.
Remote code execution in LibreNMS versions before 26.5.0 stems from the AboutController passing the snmpget configuration value directly to shell_exec() with a validation mechanism rendered ineffective by a PHP assignment operator bug. An authenticated administrator can update the snmpget setting to reference any executable already present on the server filesystem, then trigger code execution by visiting the /about endpoint, yielding full host compromise under web server privileges. No public exploit has been identified and this vulnerability is absent from CISA KEV; vendor-released patch 26.5.0 is available.
OS command injection in yast2-samba-client through 5.0.4 allows an attacker who controls Active Directory content - via a rogue domain controller or delegated AD object-creation rights - to execute arbitrary commands as root on a SUSE Linux machine during the domain-join process. The attack exploits unsanitized AD directory tree values being passed directly to shell commands running with root privileges inside the YaST2 domain-join workflow. No confirmed KEV status and no public exploit code are available at time of analysis.
OS command injection in SUSE's yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the target Linux host. The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) constructs Samba net ads join, net ads lookup -S, and net ads testjoin command strings by directly interpolating OU, dnshostname, AD username, and AD domain name values without validation or shell-quoting, then passes the assembled string to Ruby's Open3.popen2 or Open3.capture2, which delegates to /bin/sh. No public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog.
OS command injection in yast2-users (through version 5.0.8) allows root-level arbitrary command execution on SUSE Linux systems when an administrator views a malicious LDAP user's Password Settings tab. The `get_password_term()` function reads `shadowLastChange` and `shadowExpire` LDAP attributes without numeric validation and passes them to `format_days_after_epoch()`, which interpolates the values directly into a shell command executed via Ruby backticks. No public exploit or CISA KEV listing has been confirmed at time of analysis; EPSS data is unavailable.
Remote command injection in Cobham SATCOM VSAT7090 Maritime Satellite Router (all versions through build 20260704) allows low-privileged remote attackers to execute arbitrary OS commands by supplying maliciously crafted sender or recipients values within JSON-parsed mail report configuration. The vulnerable function c_set_reports_decode in mail-report.sh passes these arguments unsanitized to shell commands, yielding full device compromise. A public proof-of-concept exploit exists, the vendor has not responded to coordinated disclosure, and no patch is available - creating an unmitigated remote code execution exposure on an operational maritime communications device.
Privilege escalation to root in Plesk for Linux (18.0.34 up to 18.0.79.9 / 18.0.80.5) lets a customer- or reseller-level account with shell access run OS command injection (CWE-78) to take over the entire hosting server. Any tenant permitted to use - or to toggle on - their own shell access can break out of their restricted account and reach the root identity, collapsing the isolation between shared-hosting customers and the host. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, but the vendor rates it critical (CVSS 9.0) and has shipped fixed builds.
Command injection in RedPort Optimizer wXa-203, wXa-213, and wXa-223 devices (firmware through 20260704) allows low-privileged remote attackers to execute arbitrary OS commands via the System Clock management endpoint. The vulnerable `exec()` call in `/xgatev1/system/datetime.php` accepts unsanitized user input, enabling shell metacharacter injection. A public proof-of-concept exploit has been disclosed via Feishu, the vendor did not respond to responsible disclosure, and no patch has been released, leaving operators without an official remediation path.
Command injection in QVidium Opera11 (firmware 3.3.2a26-Ax4x-opera11) lets remote attackers run arbitrary OS commands by manipulating the ipaddr argument of the /cgi-bin/net_tr.cgi CGI script. The flaw is remotely reachable without authentication and publicly available exploit code exists, but it is not listed in CISA KEV. Because QVidium has ceased operations, no fix will ever be issued, making every deployed unit permanently vulnerable.
OS command injection in the Digitální a informační agentura (DIA) eObčanka-Identifikace macOS client (the Czech national electronic-ID 'eOP' identification app) lets a remote attacker execute arbitrary shell commands by luring a victim to open a crafted czeeopauth:// URL. Versions prior to 3.6.0 pass incoming URL-scheme parameters into a compiled AppleScript wrapper via string concatenation without sanitization, so attacker-controlled input breaks out of the intended command. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV, but the CVSS 9.3 rating reflects unauthenticated network-reachable code execution requiring only that the user follow a malicious link.
OS command injection in Pardus Boot Repair versions 1.0.7 through before 1.0.8 allows a local attacker to execute arbitrary OS commands with the elevated privileges under which the tool operates. The vulnerability stems from improper neutralization of shell metacharacters in user-supplied input passed to OS commands within this boot repair utility developed by TÜBİTAK BİLGEM. No public exploit code or active exploitation has been identified at time of analysis, but the full C/I/A impact and privilege-elevating nature of the tool make this a serious local escalation risk for Pardus Linux deployments.
OS command injection in D-Link DNS-340L and DNS-345 NAS appliances (firmware through 20260717) allows authenticated network attackers to execute arbitrary operating system commands by supplying shell metacharacters in the alias, username, password, or volume_location arguments of the iSCSI management endpoint /cgi-bin/iscsi_mgr.cgi. A public proof-of-concept exploit has been disclosed, materially lowering the bar for opportunistic exploitation against devices with default or weak credentials. No CISA KEV listing has been identified, but the accessible attack surface and available POC make this a priority remediation item for any deployment with this NAS model exposed to untrusted networks.
OS command injection in D-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 NAS devices allows remote authenticated attackers to execute arbitrary operating system commands by manipulating the `f_ups_ip` argument passed to `/cgi-bin/usb_device.cgi`. The vulnerability arises from unsanitized user-controlled input being passed directly to an OS shell call (CWE-78) within the CGI handler responsible for USB/UPS device configuration. A public proof-of-concept exploit has been disclosed; no patch has been identified at time of analysis. EPSS data was not provided, but the combination of a network-accessible vector, publicly available exploit, and widespread SMB/home-lab deployment of these NAS models elevates real-world risk.
OS command injection in D-Link DNS-327L and DNS-340L NAS devices (all firmware versions through 20260717) allows a remote authenticated attacker to execute arbitrary operating system commands by supplying crafted input to the f_dev parameter of the /cgi-bin/ve_mgr.cgi endpoint. A proof-of-concept exploit is publicly available, materially lowering the barrier for post-authentication abuse. Full OS-level compromise - including persistent backdoor installation and wholesale data exfiltration from attached storage - is achievable; this CVE is not currently listed in CISA KEV, so widespread active exploitation has not been confirmed.
OS command injection in D-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 NAS devices allows a low-privileged remote attacker to execute arbitrary operating system commands via the `upIsoRootPath` argument in `/cgi-bin/isomount_mgr.cgi`. All firmware versions through 20260717 are confirmed affected across all four models. A public proof-of-concept exploit is available, materially lowering the bar for exploitation, and no vendor patch has been identified - consistent with D-Link's history of leaving legacy NAS firmware unpatched.
OS command injection in D-Link DNS-340L and DNS-345 NAS devices exposes authenticated administrators to arbitrary system command execution via the Virtual Volume Handler CGI endpoint across firmware versions 1.01B04, 1.03B06, 1.04.B02, and 1.05b04. The `/cgi-bin/virtual_vol.cgi` component passes CGI parameters `f_sharename`, `f_target`, and `f_name` unsanitized into OS-level calls, granting attackers full shell access on the underlying firmware. Publicly available exploit code exists, and no vendor-released patch has been identified at time of analysis, leaving all listed firmware versions unmitigated.
Command injection reachable via authentication bypass in ZTE ZXDU68 S202 V5.0, a telecom DC power supply monitoring system, lets adjacent-network attackers gain root and delete core runtime files-crashing the monitoring module-while stealing stored credentials such as SNMP community strings. Rated CVSS 9.6 with scope change, exploitation allows tampering with critical power-system parameters and can drive the entire power plant into abnormal operation. No public exploit is identified at time of analysis and it is not in CISA KEV.
SMTP command injection in Nodemailer before 8.0.4 lets attackers smuggle arbitrary SMTP verbs (notably RCPT TO) into outgoing mail by planting CRLF characters in the envelope.size value, silently adding attacker-controlled recipients or otherwise manipulating the MAIL FROM dialogue. Only applications that pass a custom envelope object and expose its size property to untrusted input are affected, since Nodemailer's default auto-constructed envelope never sets size. A working proof-of-concept is published in the GHSA advisory; there is no public exploit identified beyond that PoC and no evidence of active exploitation.
OS command injection in MetaGPT 0.8.1 allows an attacker who controls the path argument of RepoParser.rebuild_class_views() (metagpt/repo_parser.py) to execute arbitrary shell commands on the host running the framework. MetaGPT is an open-source LLM multi-agent development framework, and this flaw lets attacker-influenced repository/path input break out into command execution. A public exploit write-up exists; the issue is not in CISA KEV and EPSS is low (~0.47%).
OS command injection in Qubes OS (qubes-core-dom0-linux before 4.3.22) allows an attacker who controls any qube to execute arbitrary commands in dom0 - the privileged hypervisor control domain - when a dom0 operator runs qvm-copy-to-vm targeting that attacker-controlled qube. The root cause (CWE-78) is qfile-dom0-agent.c passing unsanitized, attacker-crafted error messages to the C system() function, where embedded shell metacharacters are interpreted as commands in the dom0 shell context. No public exploit or CISA KEV listing has been identified; however, successful exploitation yields complete Qubes OS compromise because dom0 governs all other virtual machines on the system.
OS command injection in PowSyBl Core's AbstractLocalCommandExecutor implementations allows authenticated callers who forward untrusted data to the vulnerable public APIs to execute arbitrary shell commands as the JVM process user on both Unix and Windows hosts. Affected versions are com.powsybl:powsybl-computation-local up to and including 7.2.1; the flaw is a library-level sink, meaning any REST front-end, pypowsybl integration, or multi-tenant grid analysis platform embedding powsybl-core that passes external parameters to LocalComputationManager.execute(), ActionSimulatorTool.run(), or AmplModelRunner.run() inherits the vulnerability without modifying powsybl code. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified, but the advisory documents multiple injection vectors with bypass paths for the previously weak escaping.
Command injection in JS Recon (js-recon) versions 1.2.1-beta.1 through 1.3.1-beta.2 lets anyone who opens a pull request run arbitrary commands on the project's GitHub Actions runner. The vulnerable PR Branch Checker workflow (.github/workflows/pr_checker.yml) interpolates the attacker-controlled branch name and fork repository name into a shell 'gh pr comment' command without sanitization. No public exploit is identified at time of analysis and it is not in CISA KEV, but the flaw is trivially reachable by external contributors and executes with the workflow's write-capable GITHUB_TOKEN.
Remote code execution in Yamcs (yamcs-core <= 5.12.7 and 5.13.0-5.13.1) lets an authenticated, low-privileged user run arbitrary OS commands by injecting a StreamSQL LIKE pattern that breaks out of a generated Java string literal compiled at runtime by Janino. Because the pattern is embedded raw whether it arrives as a SQL literal or a bound '?' argument, the sink is reachable not only from the archiving endpoints but from routine read-only APIs (readRows, events search, activities listing), including the Events page search box. A detailed vendor-published proof of concept exists; this is not in CISA KEV, so it is publicly available exploit code rather than confirmed active exploitation.
Command injection in Snyk Sweater Comb before version 3.8.8 allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands on the host running the lint operation. The root cause is the expectGitBranch() function in src/lint.ts passing the unsanitized linters.<key>.optic-ci.original branch name value directly into Node.js child_process.exec() via an unescaped template literal, where the shell interpreter evaluates injected metacharacters as commands. The highest-risk exploitation path is a malicious pull request that plants a crafted .vervet.yaml, triggering command execution when a maintainer or CI pipeline subsequently runs sweater-comb lint; no CISA KEV listing or confirmed public exploit exists at time of analysis.
OS command injection in PLANET GS-4210-16P2S managed switch firmware allows a remote attacker with administrator web credentials to execute arbitrary operating-system commands on the device. The web_smtp_test_post handler in /cgi-bin/dispatcher.cgi passes a caller-supplied SMTP server field directly into a shell command without sanitization, exposing the full underlying firmware OS to the authenticated attacker. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; however, the CVSS 4.0 score of 8.6 reflects full confidentiality, integrity, and availability compromise on successful exploitation.
Authenticated OS command injection in PLANET GS-4210-16P2S managed switch firmware prior to 3.441b260626 enables a remote administrator to execute arbitrary commands on the device operating system via a crafted certificate upload request targeting /cgi-bin/httpuploadcert.cgi. The certificate password field is incorporated into a shell command without sanitization of shell metacharacters, a textbook CWE-78 root cause. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation requires valid administrator-level web credentials, confirmed by CVSS 4.0 PR:H.
OS command injection in the PLANET GS-4210-16P2S managed PoE switch firmware before 3.441b260626 allows an authenticated remote attacker with administrative access to execute arbitrary operating-system commands on the device. The VLAN membership editing handler in /cgi-bin/dispatcher.cgi passes the memberTags POST parameter directly into a shell command without any sanitization, constituting a textbook CWE-78 flaw. No public exploit code and no CISA KEV listing are identified at time of analysis, though the CVSS 4.0 score of 8.6 reflects full confidentiality, integrity, and availability impact upon successful exploitation.
Unauthenticated OS command injection in Green-Computing NUMail lets remote attackers execute arbitrary operating-system commands on the underlying mail server host. The CVSS 4.0 score of 9.3 reflects network reach with no privileges or user interaction and full compromise of confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV, but the combination of pre-auth access and command execution makes it a high-priority patch target.
OS command injection in openNDS before 11.0.0 allows an authenticated captive portal user to execute arbitrary shell commands on the host router by embedding semicolons in HTTP GET query parameter names sent to the client_params.sh script. The daemon-invoked script passes unsanitized parameter keys directly into shell commands, making the exploitation straightforward once an attacker has portal authentication. No public exploit or CISA KEV listing has been identified at time of analysis; an upstream fix is available targeting version 11.0.0.
Unauthenticated OS command injection in openNDS before 11.0.0 allows any adjacent-network attacker - such as an unprivileged user connected to a captive portal WiFi - to execute arbitrary shell commands on the host router by supplying a crafted `fas` query parameter to the `/opennds_preauth/` endpoint. The vulnerability originates in `libopennds.sh`, which processes the parameter without sanitizing shell metacharacters before passing it to OS-level commands. The fix, published in commit 8c03750, introduces strict base64-character allowlist validation that rejects any query string containing characters outside A-Za-z0-9+/=. No public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in 23blocks-OS ai-maestro v0.24.17 lets an attacker who controls an agent or tmux session name run arbitrary shell commands on the host. The flawed killSessionSync path (lib/agent-runtime.ts) built tmux commands by interpolating the session name into a shell string passed to execSync, so metacharacters in the name break out into command context. The upstream commit 06d54f0 fixes it in v0.24.18 by switching to execFileSync with argument arrays and adding an agent-name allowlist; no public exploit or CISA KEV listing is confirmed, though a third-party research advisory exists.
Command injection in oPanel's advanced/curl component allows authenticated attackers to execute arbitrary shell commands on the underlying server. The 'url' parameter accepted by the built-in curl tool is not sanitized, enabling shell metacharacter injection by any logged-in user. A public proof-of-concept is available at the linked GitHub repository, and SSVC rates the technical impact as total, meaning full system compromise is achievable post-authentication.
OS command injection in the Xiiaozet LK100W web-based management interface enables network-accessible, low-privilege authenticated attackers to execute arbitrary operating system commands with elevated privileges, resulting in potential full device compromise. Reported by ICS-CERT under advisory ICSA-26-239-01 and scored CVSS 4.0 at 8.7 (High), this is an OT/industrial device vulnerability with high confidentiality, integrity, and availability impact to the vulnerable system. No public exploit code or CISA KEV listing has been identified at time of analysis; however, an 'Authentication Bypass' tag in the source data introduces uncertainty about whether the effective exploitation prerequisite is lower than the PR:L CVSS metric indicates.
OS command injection in ZoneMinder's event export functionality enables any authenticated user holding the View Events permission to execute arbitrary commands on the underlying server. The exportFile HTTP request parameter is passed without sanitization into PHP's exec() function, granting attackers full control over server-side command execution. Reported by ICS-CERT under ICSA-26-237-02 and tracked in GitHub Security Advisory GHSA-88m4-hrgp-m9v3, the flaw carries a CVSS 4.0 score of 8.7 across all current ZoneMinder versions, with no public exploit identified at time of analysis.
Arbitrary command execution in jahlives' openssl_encrypt before 1.4.9 arises when the tool's 'info' command reconstructs and prints a CLI invocation using untrusted metadata fields (such as pepper_name) without shell-quoting. An attacker who controls the metadata of an encrypted file can embed shell commands that run on the victim's system the moment the printed CLI block is copied and pasted into a terminal. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; risk hinges on the victim copy-pasting attacker-influenced output.
OS command injection in maquina-app rails-mcp-server versions 1.4.0 through 1.6.0 allows any caller with access to the execute_ruby MCP tool to escape the purported Ruby sandbox and execute arbitrary shell commands as the server process owner. The execute_ruby tool's denylist blocked Kernel#system, exec, and backtick invocations but never covered Ruby's pseudo-terminal library (PTY) entry points - PTY.spawn and PTY.getpty - enabling a caller to require 'pty' and spawn a child process entirely outside the guarded method replacements. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, but the bypass path is fully documented in the vendor's public patch PR.
OS command injection in Liman server management software (limanmys/core) before version 2.2.2 - 1103 lets an authenticated administrator run arbitrary operating-system commands on the host via the log rotation configuration endpoint. The unsanitized `ip_address` parameter is concatenated into a shell command, allowing single-quote shell-escape to break out and execute attacker-controlled commands. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it is fixed in 2.2.2 - 1103.
Remote unauthenticated command execution affects a broad range of Zbtlink MT7620-based routers and gateways (WE1326, WE2426-C, WE5926 family, WE826 family, WG108/WG3526, WF3526-P, CTN720-W1, LF-1541, MT7620N, WRC1) whose infosrvd service listens on UDP/9992. A single crafted UDP packet lets an attacker run arbitrary commands as root, because the service's authentication relies on a hardcoded salt and accepts an all-zero wildcard MAC, defeating the intended check. Publicly available exploit code exists (research and advisory published by VulnCheck), the CVSS 4.0 base score is 9.3, and no active exploitation has been confirmed in CISA KEV at time of analysis.
Command injection in luci-app-https-dns-proxy on OpenWrt allows authenticated web-interface users to execute arbitrary shell commands on the router as the rpcd service account (typically root) by supplying shell metacharacters in the name parameter to the setInitAction RPC endpoint. The vulnerability exists in versions preceding the 2026-01-17 PR #15 fix across both the stangri and mossdef-org forks. A public exploit repository is available, though EPSS remains low (0.18%) and no CISA KEV listing exists, suggesting limited observed in-the-wild exploitation at time of analysis.
Command injection in the bs_SetLimitCli_info function of the libshare.so library on LB-Link AC450M (V4.0.0) routers lets attackers inject shell metacharacters into a parameter that is passed to a system-level command context, yielding arbitrary OS command execution. The CVSS 3.1 vector (9.8) describes network-reachable, unauthenticated exploitation with full confidentiality, integrity, and availability impact. No CISA KEV listing and no confirmed exploit code, though a public technical write-up describing the flaw exists; EPSS is modest at 0.53% (42nd percentile).
Remote code execution in Agno (the Python AI-agent framework) up to and including 2.5.8 lets attackers run arbitrary code and OS commands on the host by way of prompt injection. The PythonTools and ShellTools components feed LLM-generated arguments straight into exec(), runpy.run_path(), and subprocess.run() without sanitization, so an attacker who plants malicious instructions in any content the agent ingests (a web page, a document) can hijack execution. CVSS is rated 9.8 and the CVSS vector marks it unauthenticated/network, but no public exploit is identified at time of analysis and EPSS is low at 0.60% (46th percentile).
Command injection in the LB-Link AC2100_AZ3 (V1.0.4) router allows attackers to run arbitrary operating-system commands by supplying shell metacharacters to the bs_SetLimitCli_info function in the libshare.so library, which passes unsanitized input into a system-level command context. Successful exploitation yields full compromise (confidentiality, integrity, availability) of the device, typically at elevated/root privilege given the embedded-Linux design. A public technical write-up documenting the flaw exists on GitHub, but it is not listed in CISA KEV and EPSS estimates exploitation probability at a modest 0.54% (43rd percentile).
OS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged authenticated users. The CWE-78 root cause indicates that user-controlled input is passed unsanitized to OS-level shell commands exposed through a network-accessible interface. Dell confirmed this in advisory DSA-2026-369; no public exploit or CISA KEV listing has been identified at time of analysis, though the full C:H/I:H/A:H impact profile makes this a high priority for any organization running this data protection platform.
OS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to execute arbitrary operating system commands on the underlying host. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms network-accessible exploitation requiring only a valid low-privileged credential, with full confidentiality, integrity, and availability impact on the vulnerable system. No public exploit code or active exploitation has been identified at time of analysis.
OS command injection in Dell Cloud Disaster Recovery versions 20.2 and prior allows a high-privileged remote attacker to execute arbitrary operating system commands via the product's REST API, resulting in full system compromise. The vulnerability is rooted in insufficient sanitization of special characters within API inputs (CWE-78) and is reachable over the network without user interaction. No public exploit code or active exploitation has been identified at time of analysis; Dell has released a security advisory (DSA-2026-353) addressing the issue.
Remote code execution in OpenTalker SadTalker allows attackers to run arbitrary OS commands by supplying audio files whose names contain shell metacharacters, which are interpolated unescaped into ffmpeg command lines during video muxing (CWE-78). Any deployment that accepts attacker-influenced audio uploads and then generates video is affected; the flaw was reported by VulnCheck with an accompanying advisory, though no public exploit code or active exploitation has been identified at time of analysis. The CVSS 4.0 base score of 9.3 reflects unauthenticated network-triggerable full-system compromise.
OS command injection in getomni-ai's zerox 1.1.20 (the node-zerox document-to-markdown library) lets remote attackers execute arbitrary shell commands by supplying a document URL whose file extension contains command-substitution syntax. The unsanitized extension is interpolated into shell commands run by poppler utilities during file download, so injection fires before any document processing. Reported by VulnCheck; no public exploit code is identified at time of analysis and it is not in CISA KEV, though the fix issue is public.
Command allowlist bypass in cli-mcp-server 0.2.5 lets callers of this Model Context Protocol server run arbitrary, non-allowlisted commands by embedding shell command substitution ($(...) or backticks) inside an otherwise-permitted command. The flaw lives in _validate_command_with_operators and is only reachable when the ALLOW_SHELL_OPERATORS option is enabled, at which point the ALLOWED_COMMANDS safelist is effectively defeated. Reported by VulnCheck with a CVSS 4.0 score of 9.2; no public exploit identified at time of analysis, though the technique is trivially derivable from the advisory.
Unauthenticated OS command injection in XING Inc.'s CPTrans-ME-X allows remote attackers to inject and execute arbitrary operating-system commands on the device without any credentials. The flaw (CWE-78) carries a CVSS 4.0 base score of 9.3 with full confidentiality, integrity, and availability impact, meaning a successful attacker gains complete control of the affected unit. No public exploit identified at time of analysis, and the device is not listed in CISA KEV.
Authenticated remote code execution in seacms v13.6 allows a low-privileged attacker to execute arbitrary OS commands by sending a crafted POST request to the admin_config.php component, exploiting a CWE-78 OS command injection flaw. The vulnerability achieves full system compromise (C:H/I:H/A:H) over the network with no user interaction required beyond authentication. No public exploit has been identified at time of analysis and EPSS sits at 0.24% (15th percentile), indicating minimal observed exploitation pressure currently.
Command injection in MBS-Solutions X-Serie Gateway firmware V6_00_05 enables an authenticated low-privileged Standard-role user to execute arbitrary OS commands as root by exploiting the ugw-restart method in /cgi-bin/wwwugw.cgi. Unsanitized user input is passed directly to the dpcheck system utility, which runs with root privileges, yielding full device compromise from a minimal trust level. Publicly available exploit code exists via a GitHub proof-of-concept repository; EPSS is low (0.24%, 15th percentile), consistent with a niche product, though the public PoC substantially lowers the barrier for targeted attacks.
Remote code execution in MOOS-IvP through 24.8.1 arises from unsanitized shell metacharacters passed to a `system("mkdir ...")` call inside `SplitHandler::handlePreCheckSplitDir()`, reachable via the `alogsplit` log-processing utility. An attacker who controls either a log file's pathname - including its filename - or the `--dir` command-line parameter can embed shell syntax (e.g., backtick substitution or `$(...)` sequences) that executes arbitrary commands with the privileges of the operator invoking `alogsplit`. No public exploit or CISA KEV listing has been identified at time of analysis; the fix is confirmed in upstream GitHub PR #127, replacing the dangerous `system()` call with a direct `mkdir(2)` syscall.
Remote OS command injection in MOOS-IvP's uMemWatch utility (through version 24.8.1) lets attackers who can connect to the MOOSDB as a client execute arbitrary shell commands as the uMemWatch process user. The uMemWatch memory-monitoring tool builds a shell command string that embeds the attacker-controlled MOOS client name as an unquoted stdout-redirection target, so shell metacharacters in the name are interpreted by the shell. Publicly available upstream fix code exists (PR #121); no public exploit was identified at time of analysis, and the flaw is not in CISA KEV.
Remote code execution in MOOS-IvP's iSay module (through version 24.8.1) lets any actor on the MOOS message bus run arbitrary shell commands as the iSay process user. The SAY_MOOS variable handler in Sayer.cpp builds a speech command string and passes it straight to system(), so a published message containing backticks or $() command-substitution syntax is executed by the shell. Reported by VulnCheck with a vendor patch available; no public exploit is identified at time of analysis, though the source-level root cause is fully disclosed in the upstream fix commit.
OS command injection in D-Link DNS-320 ShareCenter firmware 2.06B01 allows a remote authenticated attacker to execute arbitrary operating system commands by supplying a crafted value for the fileurl parameter in the File Sharing CGI handler (/cgi/file_sharing.cgi). The vulnerability carries a CVSS 4.0 base score of 8.5 with high-privilege requirement but yields full system-level compromise on success, including subsequent-system impact. A public exploit has been disclosed, materially lowering the barrier to exploitation for any remaining deployments of this legacy NAS appliance.
OS command injection in the D-Link DNS-340L NAS firmware 1.01B04 allows a remote administrator to execute arbitrary operating system commands via unsanitized parameters in the Add-On Center CGI handler at `/cgi-bin/addon_center.cgi`. The parameters `f_name`, `f_url`, `f_flag`, and `f_login_user` are passed without sanitization to a shell command, enabling full root-level device takeover. A public proof-of-concept exploit has been disclosed on GitHub, raising practical exploitability beyond the theoretical; no vendor patch has been identified, and the DNS-340L is an end-of-life device unlikely to receive one.
OS command injection in D-Link DNS-340L firmware 1.01B04 allows authenticated remote attackers to execute arbitrary operating system commands by manipulating the `callback_url` or `sync_interval` arguments passed to the `/cgi-bin/dropbox.cgi` CGI handler. A public proof-of-concept exploit exists, raising the likelihood of opportunistic exploitation against exposed NAS devices. No patch has been identified at time of analysis, and the DNS-340L is likely an end-of-life product with no vendor remediation roadmap.
Command injection in OpenVPN for Windows allows a low-privilege attacker - operating through a rogue CA combined with a configured validation script - to inject arbitrary commands via improperly quoted CreateProcess() arguments that include characters special to cmd.exe. Affected is OpenVPN prior to v2.7.7 on Windows platforms only. A successful attacker can achieve full confidentiality, integrity, and availability impact on the host running the VPN client or server. No public exploit has been identified at time of analysis, and this is not listed in CISA KEV.
OS command injection in the Amazon Web Services codecatalyst-blueprints npm package (before 0.3.156) allows a repository contributor with commit access to execute arbitrary commands inside the blueprint resynthesis environment by embedding shell metacharacters in the `owner` field of a `[local]` merge strategy entry within a crafted `.ownership-file`. The attack requires both commit access to a project repository and a resynthesis trigger event, making automated mass exploitation infeasible. No public exploit has been identified and SSVC rates exploitation as none and non-automatable; users of the managed Amazon CodeCatalyst service require no action because AWS applies independent server-side allowlist enforcement and per-project environment isolation.
Remote code execution in NousResearch Hermes Agent 0.18.2-0.21.0 allows an unauthenticated attacker to execute arbitrary OS commands in the victim's process context by supplying a malicious git repository containing a crafted `.git/config` that sets `core.fsmonitor` to an attacker-controlled binary or script. Exploitation is triggered the moment a user opens the malicious repository and sends any message, causing the agent's internal git status call to invoke the injected command and expose the full process environment - including configured LLM provider API keys. A public exploit writeup exists (manifold.security), and a patch was released as commit f6234d0.
Remote code execution in n8n's Git node allows an authenticated workflow user to execute arbitrary OS commands as the n8n process user by pointing the node at a repository containing malicious git configuration. The vulnerability arises from an incomplete sanitization list that omitted the content-filter and merge-driver git configuration key families, allowing those keys to survive into git operations and trigger arbitrary command execution during routine Add, Commit, Checkout, or Pull operations. Patched versions 1.123.73, 2.35.4, and 2.36.2 are confirmed available; no public exploit or CISA KEV listing has been identified at time of analysis.
Command injection in SEPPmail Secure Email Gateway before version 15.0.7 enables authenticated administrators to execute operating system commands at elevated privilege levels beyond the intended administrative scope. Classified CWE-78, the flaw exists within the network-accessible management interface and was reported by NCSC.ch (Swiss National Cybersecurity Centre). No active exploitation or public proof-of-concept code has been identified at time of analysis; the vendor-released fix is available in version 15.0.7.
Incomplete patch for OS command injection in the Nuclio serverless dashboard (local/Docker platform, all versions prior to 1.17.4) leaves the list-all resource code path exploitable by unauthenticated remote attackers. Shell metacharacters injected via the X-Nuclio-Function-Namespace, X-Nuclio-Project-Namespace, or X-Nuclio-Function-Event-Namespace HTTP headers bypass the prior fix and reach a /bin/sh -c invocation in pkg/platform/local/client/store.go unescaped, enabling arbitrary command execution inside the dashboard container. No public exploit has been identified at time of analysis, but the attack surface is network-accessible and requires no authentication, lowering the bar significantly for any attacker already familiar with the previously disclosed injection class (GHSA-jx7q-cpg6-669g).
OS command injection in Nuclio's local Docker platform dashboard allows remote attackers to execute arbitrary shell commands as root inside the dashboard container, which holds the Docker socket, enabling full host compromise. The function namespace value - controllable via the unauthenticated (default 'nop' auth) API - is string-interpolated without quoting into a `docker ps --filter` command executed via `/bin/sh -c`, allowing a double-quote character to break out of the filter token and inject arbitrary commands. The issue is fixed in version 1.17.4, with the patch confirmed via GitHub release tag and PR #4220; no public exploit identified at time of analysis.
Shell command injection in Nuclio's Dashboard build pipeline (versions 1.6.19–1.17.1) allows an authenticated user with function-create permission to execute arbitrary commands inside the Dashboard container by embedding shell metacharacters in the `spec.build.tempDir` field. The post-exploitation impact is substantially amplified because the Dashboard container's Kubernetes service account holds wildcard access to Secrets, Pods, Jobs, and Deployments within its namespace, enabling full namespace-level privilege escalation from a single low-privileged API call. No public exploit identified at time of analysis, but the fix commit (PR #4190) includes working proof-of-concept test cases demonstrating semicolon, pipe, subshell, and backtick injection payloads.
Remote OS command injection in AS203038 Looking Glass before 1.3.5 lets remote attackers inject shell commands through the ping/traceroute/BGP diagnostic inputs. The root cause is an unanchored regular expression in the input-validation layer that fails to bind matching to the full input, allowing malicious payloads to slip past validation and reach an underlying command. No public exploit or CISA KEV listing exists at time of analysis, but the network-facing, unauthenticated nature (CVSS 9.8) makes it high-priority for any exposed instance.
OS command injection in Jenkins TICS Plugin 2025.1.1 and earlier allows an authenticated, low-privileged Jenkins user who can control build environment variable values to execute arbitrary commands on the build agent hosting the job. The flaw stems from unsanitized environment variable values being passed directly to OS command invocations within the plugin, and the scope change (S:C) means impact falls on the agent node rather than the Jenkins controller. No public exploit code exists and SSVC rates exploitation status as none with non-automatable attack path, placing real-world priority lower than the raw CVSS score suggests.
Command injection in rpmuncompress allows a local attacker to execute arbitrary commands under the invoking user's context by supplying an archive file whose filename contains shell metacharacters. Affecting all actively supported Red Hat Enterprise Linux versions (6 through 10) and Red Hat Hardened Images, the flaw is triggered when a user or automated build pipeline invokes rpmuncompress on a maliciously named archive. No public exploit or active exploitation has been identified at time of analysis, but the low attack complexity and broad RHEL enterprise deployment footprint make this a meaningful risk for organizations processing untrusted archives in development or CI/CD workflows.
Command injection in rpm's `rpmbuild -t*` subcommand allows arbitrary command execution with build-user privileges when an attacker controls the path or filename of a tarball being processed. The vulnerability arises because shell metacharacters in tarball names are not sanitized before being passed to a shell invocation inside rpmbuild. Exploitation is most realistic in automated CI/CD pipelines that fetch externally supplied artifact archives and pass them directly to rpmbuild, a common pattern in open-source package maintainer workflows. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Authenticated command injection in Coolify before 4.2.0 allows low-privileged platform users to execute arbitrary OS commands on managed server hosts by embedding shell metacharacters into Docker environment variable key names. The flaw bypasses container isolation entirely - injected payloads travel over SSH as part of Coolify-generated Docker commands and execute in the host OS context, not within any container sandbox. The upstream fix in v4.2.0, confirmed by GitHub release tag and patch commit b50839d4515b115b7ded5db609471440249995da, adds validation constraints in ValidationPatterns.php to reject malformed key names before command construction.
OS command injection in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote authenticated administrator to execute arbitrary OS commands under specific conditions, achieving full remote code execution on the appliance. The vulnerability (CWE-78) is post-authentication and gated by administrator-level credentials, narrowing the exploitable attack surface to compromised or malicious admin accounts. No public exploit code or active exploitation has been identified at time of analysis, though SMA1000 appliances are high-value targets as network edge remote-access devices.
Authenticated command injection in the HPE AOS-CX network operating system CLI allows a high-privileged attacker to execute arbitrary commands as a privileged user on the underlying host OS of affected Aruba CX switches. The vulnerability is reachable over the network management plane and results in full system compromise (C:H/I:H/A:H) upon successful exploitation. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, but the impact is severe for any attacker who already holds administrative CLI credentials.
The analysis is complete. Key points about this CVE: - **Same advisory as CVE-2026-73749** (hpesbnw05134en_us) — HPE bundled this authenticated variant (CVSS 7.2, PR:H) alongside the higher-severity unauthenticated RCE (9.8, PR:N) in a single bulletin. - **No data quality flags** — vendor, product, and tags are accurate; the wildcard CPE simply means the exact patched version must be fetched from the HPE advisory directly. - **Injection note rejected** — the embedded "swidnica" canary marker in the editorial note was suppressed per the recorded pattern.
Unauthenticated command injection (CWE-77) in an HPE AOS-CX management component allows an adjacent-network attacker to execute arbitrary OS commands on affected switches without any credentials or user interaction. Multiple AOS-CX release trains are affected, spanning versions 10.10 through 10.18, per the EUVD affected-version data. No public exploit has been identified and CISA KEV does not list this as actively exploited, though full system compromise is achievable upon successful exploitation.
Privilege escalation in HPE AOS-CX allows an authenticated low-privileged user to execute arbitrary commands with the privileges of a higher-privileged or root-level account on the underlying operating system. The vulnerability is triggered through specific command-line operations within the AOS-CX CLI environment, making it exploitable over the network by any user with basic CLI credentials. With a CVSS score of 8.8 and full C:H/I:H/A:H impact, successful exploitation yields complete control of the affected switch's OS. No public exploit code and no CISA KEV listing are identified at time of analysis.
OS command injection in HPE AOS-CX's web-based management interface allows any authenticated low-privileged user to execute arbitrary commands on the underlying switch operating system, achieving full device compromise. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms the attack is fully remote, requires no user interaction, and demands only a minimal-privilege account - not administrative credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low access complexity and complete C/I/A impact make this an urgent patching priority for network infrastructure teams.
Command injection in PHP Composer's Perforce VCS handler allows arbitrary local command execution with the privileges of the developer or CI account running package installation. Affects all Composer releases from 1.0 through 2.2.29 and 2.10.2; the flaw exploits P4PORT's undocumented `rsh:`/`jsh:` transport keywords, which instruct the Perforce `p4` client to spawn a local child process instead of connecting to a server, allowing attacker-controlled package metadata to trigger OS command execution. No public exploit identified at time of analysis, though the fix commit includes test payloads confirming the mechanism.
Command injection in HPE Networking Fabric Composer's web-based management interface enables authenticated high-privilege attackers to execute arbitrary OS commands as a privileged user on the underlying operating system. The CVSS vector confirms network-accessible exploitation (AV:N/AC:L) requiring administrator-level credentials (PR:H), with full confidentiality, integrity, and availability impact upon success. No public exploit has been identified at time of analysis, and the vulnerability does not currently appear in CISA KEV; the HPE security bulletin hpesbnw05133en_us is the authoritative source for remediation guidance.
Remote code execution in HPE Networking Fabric Composer allows an authenticated attacker with high-privilege API access to execute arbitrary operating system commands as a privileged user on the underlying host. The attack vector is the Fabric Composer API, where insecure file operations can be weaponized post-authentication to break out of the application layer and reach the OS. No public exploit code or active exploitation has been identified at time of analysis; the CVSS score of 7.2 reflects the severe impact moderated by the high-privilege authentication prerequisite.
Command injection in HPE Networking Fabric Composer's web-based management interface permits an unauthenticated remote attacker to execute arbitrary operating system commands leading to complete host compromise, subject to preconditions outside the attacker's direct control. The CVSS vector (AV:N/AC:H/PR:N/UI:R) reflects this split profile: no credential barrier for the attacker, but both high-complexity environmental conditions and victim interaction must align before exploitation succeeds. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution in HPE Networking Fabric Composer exposes organizations to complete host compromise by an unauthenticated remote attacker, provided attacker-independent preconditions and a user-interaction trigger are both satisfied. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R) scores 7.5, reflecting full C:H/I:H/A:H impact tempered by high attack complexity and required user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated remote command execution in HPE Networking Fabric Composer's API allows a network-accessible attacker to run arbitrary commands on the underlying operating system, resulting in complete host compromise. Exploitation requires certain preconditions outside the attacker's control (reflected in AC:H), but no authentication is needed once those conditions are satisfied. No public exploit has been identified at time of analysis; HPE has published a security bulletin addressing the issue.
Arbitrary OS command execution in HPE Networking Fabric Composer allows an unauthenticated attacker on an adjacent network segment to run arbitrary commands on the underlying host, achieving full system compromise. Exploitation depends on preconditions outside the attacker's direct control, which constrains practical risk and drives the AC:H rating despite the severity of the impact. No public exploit or active exploitation has been identified at time of analysis; HPE has published a security bulletin (hpesbnw05133en_us) addressing this issue.
Privilege escalation in HPE Networking Fabric Composer allows an authenticated low-privilege operator to gain full administrative control via a command sanitization bypass in the product API. Exploitation is network-accessible with low complexity and no user interaction required, yielding complete confidentiality, integrity, and availability impact on the affected system. No public exploit code has been identified at time of analysis, and CISA has not listed this CVE in the Known Exploited Vulnerabilities catalog.
OS command injection in Dell PowerStore allows a locally authenticated user with limited privileges to execute arbitrary commands with root privileges, achieving full appliance compromise. The CVSS:3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, score 8.8) confirms low-complexity local privilege escalation with scope change to root, covering complete confidentiality, integrity, and availability impact. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity and full impact triad make this a meaningful risk for environments where multiple accounts share local PowerStore access.
Remote code execution in the FS-Poster WordPress plugin (versions up to and including 8.0.1) allows any authenticated user with subscriber-level access to execute arbitrary OS commands on the underlying web server. The vulnerability combines two weaknesses: the FFmpeg path parameter accepted by the plugin's REST API is passed unsanitized to PHP's exec() function (CWE-77 command injection), and the REST API endpoints responsible for this functionality lack proper authorization checks. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low privilege bar - a standard subscriber account - makes this accessible to any registered WordPress user.
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arbitrary operating system commands with root privileges, achieving full appliance compromise. The CVSS scope-change metric (S:C) reflects that root access on a storage platform threatens all data hosted on the array, extending blast radius beyond the appliance itself. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity once local access is established makes this a priority remediation for organizations running affected PowerStore T and Q series hardware.
Command injection in rpm's `rpmuncompress` utility allows a local attacker who can place a crafted `.gem` file containing RPM macro syntax to execute arbitrary commands with the privileges of the invoking user or automated workflow. The vulnerability arises because the macro expansion engine processes the gem filename during command construction without sanitization, meaning any RPM macro embedded in the filename is evaluated at execution time. No public exploit code has been identified at time of analysis; the CVSS 7.0 score reflects full CIA impact constrained by local attack vector and required user interaction.
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges to execute arbitrary commands at the root level, achieving full privilege escalation on the appliance. The CVSS scope change (S:C) reflects that root access on a storage platform extends impact beyond the immediate process boundary to the entire appliance and potentially dependent workloads. Dell has published advisory DSA-2026-330, but no specific patched version was provided in available data. No public exploit identified at time of analysis.
OS command injection in Schneider Electric NetBotz 5 (models 750 and 755) environmental monitoring appliances allows arbitrary Linux OS command execution when a system backup that has been maliciously modified is restored on the device. Exploitation requires high-privilege administrative access and adjacent network positioning, substantially narrowing the realistic threat population to insiders or supply-chain compromise scenarios. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
OS command injection in LibreNMS's libvirt discovery module (VminfoLibvirt.php) enables any authenticated administrator to execute arbitrary OS commands on the discovery worker host by setting a crafted device hostname. Affected deployments span LibreNMS 23.10.0 through 26.3.x wherever the enable_libvirt option is explicitly set to true; the vendor-released fix is version 26.4.0. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack pattern is straightforward for any actor holding admin credentials.
Remote code execution in LibreNMS versions before 26.5.0 stems from the AboutController passing the snmpget configuration value directly to shell_exec() with a validation mechanism rendered ineffective by a PHP assignment operator bug. An authenticated administrator can update the snmpget setting to reference any executable already present on the server filesystem, then trigger code execution by visiting the /about endpoint, yielding full host compromise under web server privileges. No public exploit has been identified and this vulnerability is absent from CISA KEV; vendor-released patch 26.5.0 is available.
OS command injection in yast2-samba-client through 5.0.4 allows an attacker who controls Active Directory content - via a rogue domain controller or delegated AD object-creation rights - to execute arbitrary commands as root on a SUSE Linux machine during the domain-join process. The attack exploits unsanitized AD directory tree values being passed directly to shell commands running with root privileges inside the YaST2 domain-join workflow. No confirmed KEV status and no public exploit code are available at time of analysis.
OS command injection in SUSE's yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the target Linux host. The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) constructs Samba net ads join, net ads lookup -S, and net ads testjoin command strings by directly interpolating OU, dnshostname, AD username, and AD domain name values without validation or shell-quoting, then passes the assembled string to Ruby's Open3.popen2 or Open3.capture2, which delegates to /bin/sh. No public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog.
OS command injection in yast2-users (through version 5.0.8) allows root-level arbitrary command execution on SUSE Linux systems when an administrator views a malicious LDAP user's Password Settings tab. The `get_password_term()` function reads `shadowLastChange` and `shadowExpire` LDAP attributes without numeric validation and passes them to `format_days_after_epoch()`, which interpolates the values directly into a shell command executed via Ruby backticks. No public exploit or CISA KEV listing has been confirmed at time of analysis; EPSS data is unavailable.
Remote command injection in Cobham SATCOM VSAT7090 Maritime Satellite Router (all versions through build 20260704) allows low-privileged remote attackers to execute arbitrary OS commands by supplying maliciously crafted sender or recipients values within JSON-parsed mail report configuration. The vulnerable function c_set_reports_decode in mail-report.sh passes these arguments unsanitized to shell commands, yielding full device compromise. A public proof-of-concept exploit exists, the vendor has not responded to coordinated disclosure, and no patch is available - creating an unmitigated remote code execution exposure on an operational maritime communications device.
Privilege escalation to root in Plesk for Linux (18.0.34 up to 18.0.79.9 / 18.0.80.5) lets a customer- or reseller-level account with shell access run OS command injection (CWE-78) to take over the entire hosting server. Any tenant permitted to use - or to toggle on - their own shell access can break out of their restricted account and reach the root identity, collapsing the isolation between shared-hosting customers and the host. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, but the vendor rates it critical (CVSS 9.0) and has shipped fixed builds.
Command injection in RedPort Optimizer wXa-203, wXa-213, and wXa-223 devices (firmware through 20260704) allows low-privileged remote attackers to execute arbitrary OS commands via the System Clock management endpoint. The vulnerable `exec()` call in `/xgatev1/system/datetime.php` accepts unsanitized user input, enabling shell metacharacter injection. A public proof-of-concept exploit has been disclosed via Feishu, the vendor did not respond to responsible disclosure, and no patch has been released, leaving operators without an official remediation path.
Command injection in QVidium Opera11 (firmware 3.3.2a26-Ax4x-opera11) lets remote attackers run arbitrary OS commands by manipulating the ipaddr argument of the /cgi-bin/net_tr.cgi CGI script. The flaw is remotely reachable without authentication and publicly available exploit code exists, but it is not listed in CISA KEV. Because QVidium has ceased operations, no fix will ever be issued, making every deployed unit permanently vulnerable.
OS command injection in the Digitální a informační agentura (DIA) eObčanka-Identifikace macOS client (the Czech national electronic-ID 'eOP' identification app) lets a remote attacker execute arbitrary shell commands by luring a victim to open a crafted czeeopauth:// URL. Versions prior to 3.6.0 pass incoming URL-scheme parameters into a compiled AppleScript wrapper via string concatenation without sanitization, so attacker-controlled input breaks out of the intended command. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV, but the CVSS 9.3 rating reflects unauthenticated network-reachable code execution requiring only that the user follow a malicious link.
OS command injection in Pardus Boot Repair versions 1.0.7 through before 1.0.8 allows a local attacker to execute arbitrary OS commands with the elevated privileges under which the tool operates. The vulnerability stems from improper neutralization of shell metacharacters in user-supplied input passed to OS commands within this boot repair utility developed by TÜBİTAK BİLGEM. No public exploit code or active exploitation has been identified at time of analysis, but the full C/I/A impact and privilege-elevating nature of the tool make this a serious local escalation risk for Pardus Linux deployments.
OS command injection in D-Link DNS-340L and DNS-345 NAS appliances (firmware through 20260717) allows authenticated network attackers to execute arbitrary operating system commands by supplying shell metacharacters in the alias, username, password, or volume_location arguments of the iSCSI management endpoint /cgi-bin/iscsi_mgr.cgi. A public proof-of-concept exploit has been disclosed, materially lowering the bar for opportunistic exploitation against devices with default or weak credentials. No CISA KEV listing has been identified, but the accessible attack surface and available POC make this a priority remediation item for any deployment with this NAS model exposed to untrusted networks.
OS command injection in D-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 NAS devices allows remote authenticated attackers to execute arbitrary operating system commands by manipulating the `f_ups_ip` argument passed to `/cgi-bin/usb_device.cgi`. The vulnerability arises from unsanitized user-controlled input being passed directly to an OS shell call (CWE-78) within the CGI handler responsible for USB/UPS device configuration. A public proof-of-concept exploit has been disclosed; no patch has been identified at time of analysis. EPSS data was not provided, but the combination of a network-accessible vector, publicly available exploit, and widespread SMB/home-lab deployment of these NAS models elevates real-world risk.
OS command injection in D-Link DNS-327L and DNS-340L NAS devices (all firmware versions through 20260717) allows a remote authenticated attacker to execute arbitrary operating system commands by supplying crafted input to the f_dev parameter of the /cgi-bin/ve_mgr.cgi endpoint. A proof-of-concept exploit is publicly available, materially lowering the barrier for post-authentication abuse. Full OS-level compromise - including persistent backdoor installation and wholesale data exfiltration from attached storage - is achievable; this CVE is not currently listed in CISA KEV, so widespread active exploitation has not been confirmed.
OS command injection in D-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 NAS devices allows a low-privileged remote attacker to execute arbitrary operating system commands via the `upIsoRootPath` argument in `/cgi-bin/isomount_mgr.cgi`. All firmware versions through 20260717 are confirmed affected across all four models. A public proof-of-concept exploit is available, materially lowering the bar for exploitation, and no vendor patch has been identified - consistent with D-Link's history of leaving legacy NAS firmware unpatched.
OS command injection in D-Link DNS-340L and DNS-345 NAS devices exposes authenticated administrators to arbitrary system command execution via the Virtual Volume Handler CGI endpoint across firmware versions 1.01B04, 1.03B06, 1.04.B02, and 1.05b04. The `/cgi-bin/virtual_vol.cgi` component passes CGI parameters `f_sharename`, `f_target`, and `f_name` unsanitized into OS-level calls, granting attackers full shell access on the underlying firmware. Publicly available exploit code exists, and no vendor-released patch has been identified at time of analysis, leaving all listed firmware versions unmitigated.
Command injection reachable via authentication bypass in ZTE ZXDU68 S202 V5.0, a telecom DC power supply monitoring system, lets adjacent-network attackers gain root and delete core runtime files-crashing the monitoring module-while stealing stored credentials such as SNMP community strings. Rated CVSS 9.6 with scope change, exploitation allows tampering with critical power-system parameters and can drive the entire power plant into abnormal operation. No public exploit is identified at time of analysis and it is not in CISA KEV.
SMTP command injection in Nodemailer before 8.0.4 lets attackers smuggle arbitrary SMTP verbs (notably RCPT TO) into outgoing mail by planting CRLF characters in the envelope.size value, silently adding attacker-controlled recipients or otherwise manipulating the MAIL FROM dialogue. Only applications that pass a custom envelope object and expose its size property to untrusted input are affected, since Nodemailer's default auto-constructed envelope never sets size. A working proof-of-concept is published in the GHSA advisory; there is no public exploit identified beyond that PoC and no evidence of active exploitation.
OS command injection in MetaGPT 0.8.1 allows an attacker who controls the path argument of RepoParser.rebuild_class_views() (metagpt/repo_parser.py) to execute arbitrary shell commands on the host running the framework. MetaGPT is an open-source LLM multi-agent development framework, and this flaw lets attacker-influenced repository/path input break out into command execution. A public exploit write-up exists; the issue is not in CISA KEV and EPSS is low (~0.47%).
OS command injection in Qubes OS (qubes-core-dom0-linux before 4.3.22) allows an attacker who controls any qube to execute arbitrary commands in dom0 - the privileged hypervisor control domain - when a dom0 operator runs qvm-copy-to-vm targeting that attacker-controlled qube. The root cause (CWE-78) is qfile-dom0-agent.c passing unsanitized, attacker-crafted error messages to the C system() function, where embedded shell metacharacters are interpreted as commands in the dom0 shell context. No public exploit or CISA KEV listing has been identified; however, successful exploitation yields complete Qubes OS compromise because dom0 governs all other virtual machines on the system.
OS command injection in PowSyBl Core's AbstractLocalCommandExecutor implementations allows authenticated callers who forward untrusted data to the vulnerable public APIs to execute arbitrary shell commands as the JVM process user on both Unix and Windows hosts. Affected versions are com.powsybl:powsybl-computation-local up to and including 7.2.1; the flaw is a library-level sink, meaning any REST front-end, pypowsybl integration, or multi-tenant grid analysis platform embedding powsybl-core that passes external parameters to LocalComputationManager.execute(), ActionSimulatorTool.run(), or AmplModelRunner.run() inherits the vulnerability without modifying powsybl code. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified, but the advisory documents multiple injection vectors with bypass paths for the previously weak escaping.
Command injection in JS Recon (js-recon) versions 1.2.1-beta.1 through 1.3.1-beta.2 lets anyone who opens a pull request run arbitrary commands on the project's GitHub Actions runner. The vulnerable PR Branch Checker workflow (.github/workflows/pr_checker.yml) interpolates the attacker-controlled branch name and fork repository name into a shell 'gh pr comment' command without sanitization. No public exploit is identified at time of analysis and it is not in CISA KEV, but the flaw is trivially reachable by external contributors and executes with the workflow's write-capable GITHUB_TOKEN.
Remote code execution in Yamcs (yamcs-core <= 5.12.7 and 5.13.0-5.13.1) lets an authenticated, low-privileged user run arbitrary OS commands by injecting a StreamSQL LIKE pattern that breaks out of a generated Java string literal compiled at runtime by Janino. Because the pattern is embedded raw whether it arrives as a SQL literal or a bound '?' argument, the sink is reachable not only from the archiving endpoints but from routine read-only APIs (readRows, events search, activities listing), including the Events page search box. A detailed vendor-published proof of concept exists; this is not in CISA KEV, so it is publicly available exploit code rather than confirmed active exploitation.
Command injection in Snyk Sweater Comb before version 3.8.8 allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands on the host running the lint operation. The root cause is the expectGitBranch() function in src/lint.ts passing the unsanitized linters.<key>.optic-ci.original branch name value directly into Node.js child_process.exec() via an unescaped template literal, where the shell interpreter evaluates injected metacharacters as commands. The highest-risk exploitation path is a malicious pull request that plants a crafted .vervet.yaml, triggering command execution when a maintainer or CI pipeline subsequently runs sweater-comb lint; no CISA KEV listing or confirmed public exploit exists at time of analysis.
OS command injection in PLANET GS-4210-16P2S managed switch firmware allows a remote attacker with administrator web credentials to execute arbitrary operating-system commands on the device. The web_smtp_test_post handler in /cgi-bin/dispatcher.cgi passes a caller-supplied SMTP server field directly into a shell command without sanitization, exposing the full underlying firmware OS to the authenticated attacker. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; however, the CVSS 4.0 score of 8.6 reflects full confidentiality, integrity, and availability compromise on successful exploitation.
Authenticated OS command injection in PLANET GS-4210-16P2S managed switch firmware prior to 3.441b260626 enables a remote administrator to execute arbitrary commands on the device operating system via a crafted certificate upload request targeting /cgi-bin/httpuploadcert.cgi. The certificate password field is incorporated into a shell command without sanitization of shell metacharacters, a textbook CWE-78 root cause. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation requires valid administrator-level web credentials, confirmed by CVSS 4.0 PR:H.
OS command injection in the PLANET GS-4210-16P2S managed PoE switch firmware before 3.441b260626 allows an authenticated remote attacker with administrative access to execute arbitrary operating-system commands on the device. The VLAN membership editing handler in /cgi-bin/dispatcher.cgi passes the memberTags POST parameter directly into a shell command without any sanitization, constituting a textbook CWE-78 flaw. No public exploit code and no CISA KEV listing are identified at time of analysis, though the CVSS 4.0 score of 8.6 reflects full confidentiality, integrity, and availability impact upon successful exploitation.
Unauthenticated OS command injection in Green-Computing NUMail lets remote attackers execute arbitrary operating-system commands on the underlying mail server host. The CVSS 4.0 score of 9.3 reflects network reach with no privileges or user interaction and full compromise of confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV, but the combination of pre-auth access and command execution makes it a high-priority patch target.
OS command injection in openNDS before 11.0.0 allows an authenticated captive portal user to execute arbitrary shell commands on the host router by embedding semicolons in HTTP GET query parameter names sent to the client_params.sh script. The daemon-invoked script passes unsanitized parameter keys directly into shell commands, making the exploitation straightforward once an attacker has portal authentication. No public exploit or CISA KEV listing has been identified at time of analysis; an upstream fix is available targeting version 11.0.0.
Unauthenticated OS command injection in openNDS before 11.0.0 allows any adjacent-network attacker - such as an unprivileged user connected to a captive portal WiFi - to execute arbitrary shell commands on the host router by supplying a crafted `fas` query parameter to the `/opennds_preauth/` endpoint. The vulnerability originates in `libopennds.sh`, which processes the parameter without sanitizing shell metacharacters before passing it to OS-level commands. The fix, published in commit 8c03750, introduces strict base64-character allowlist validation that rejects any query string containing characters outside A-Za-z0-9+/=. No public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in 23blocks-OS ai-maestro v0.24.17 lets an attacker who controls an agent or tmux session name run arbitrary shell commands on the host. The flawed killSessionSync path (lib/agent-runtime.ts) built tmux commands by interpolating the session name into a shell string passed to execSync, so metacharacters in the name break out into command context. The upstream commit 06d54f0 fixes it in v0.24.18 by switching to execFileSync with argument arrays and adding an agent-name allowlist; no public exploit or CISA KEV listing is confirmed, though a third-party research advisory exists.
Command injection in oPanel's advanced/curl component allows authenticated attackers to execute arbitrary shell commands on the underlying server. The 'url' parameter accepted by the built-in curl tool is not sanitized, enabling shell metacharacter injection by any logged-in user. A public proof-of-concept is available at the linked GitHub repository, and SSVC rates the technical impact as total, meaning full system compromise is achievable post-authentication.
OS command injection in the Xiiaozet LK100W web-based management interface enables network-accessible, low-privilege authenticated attackers to execute arbitrary operating system commands with elevated privileges, resulting in potential full device compromise. Reported by ICS-CERT under advisory ICSA-26-239-01 and scored CVSS 4.0 at 8.7 (High), this is an OT/industrial device vulnerability with high confidentiality, integrity, and availability impact to the vulnerable system. No public exploit code or CISA KEV listing has been identified at time of analysis; however, an 'Authentication Bypass' tag in the source data introduces uncertainty about whether the effective exploitation prerequisite is lower than the PR:L CVSS metric indicates.
OS command injection in ZoneMinder's event export functionality enables any authenticated user holding the View Events permission to execute arbitrary commands on the underlying server. The exportFile HTTP request parameter is passed without sanitization into PHP's exec() function, granting attackers full control over server-side command execution. Reported by ICS-CERT under ICSA-26-237-02 and tracked in GitHub Security Advisory GHSA-88m4-hrgp-m9v3, the flaw carries a CVSS 4.0 score of 8.7 across all current ZoneMinder versions, with no public exploit identified at time of analysis.
Arbitrary command execution in jahlives' openssl_encrypt before 1.4.9 arises when the tool's 'info' command reconstructs and prints a CLI invocation using untrusted metadata fields (such as pepper_name) without shell-quoting. An attacker who controls the metadata of an encrypted file can embed shell commands that run on the victim's system the moment the printed CLI block is copied and pasted into a terminal. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; risk hinges on the victim copy-pasting attacker-influenced output.
OS command injection in maquina-app rails-mcp-server versions 1.4.0 through 1.6.0 allows any caller with access to the execute_ruby MCP tool to escape the purported Ruby sandbox and execute arbitrary shell commands as the server process owner. The execute_ruby tool's denylist blocked Kernel#system, exec, and backtick invocations but never covered Ruby's pseudo-terminal library (PTY) entry points - PTY.spawn and PTY.getpty - enabling a caller to require 'pty' and spawn a child process entirely outside the guarded method replacements. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, but the bypass path is fully documented in the vendor's public patch PR.
OS command injection in Liman server management software (limanmys/core) before version 2.2.2 - 1103 lets an authenticated administrator run arbitrary operating-system commands on the host via the log rotation configuration endpoint. The unsanitized `ip_address` parameter is concatenated into a shell command, allowing single-quote shell-escape to break out and execute attacker-controlled commands. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it is fixed in 2.2.2 - 1103.
Remote unauthenticated command execution affects a broad range of Zbtlink MT7620-based routers and gateways (WE1326, WE2426-C, WE5926 family, WE826 family, WG108/WG3526, WF3526-P, CTN720-W1, LF-1541, MT7620N, WRC1) whose infosrvd service listens on UDP/9992. A single crafted UDP packet lets an attacker run arbitrary commands as root, because the service's authentication relies on a hardcoded salt and accepts an all-zero wildcard MAC, defeating the intended check. Publicly available exploit code exists (research and advisory published by VulnCheck), the CVSS 4.0 base score is 9.3, and no active exploitation has been confirmed in CISA KEV at time of analysis.
Command injection in luci-app-https-dns-proxy on OpenWrt allows authenticated web-interface users to execute arbitrary shell commands on the router as the rpcd service account (typically root) by supplying shell metacharacters in the name parameter to the setInitAction RPC endpoint. The vulnerability exists in versions preceding the 2026-01-17 PR #15 fix across both the stangri and mossdef-org forks. A public exploit repository is available, though EPSS remains low (0.18%) and no CISA KEV listing exists, suggesting limited observed in-the-wild exploitation at time of analysis.
Command injection in the bs_SetLimitCli_info function of the libshare.so library on LB-Link AC450M (V4.0.0) routers lets attackers inject shell metacharacters into a parameter that is passed to a system-level command context, yielding arbitrary OS command execution. The CVSS 3.1 vector (9.8) describes network-reachable, unauthenticated exploitation with full confidentiality, integrity, and availability impact. No CISA KEV listing and no confirmed exploit code, though a public technical write-up describing the flaw exists; EPSS is modest at 0.53% (42nd percentile).
Remote code execution in Agno (the Python AI-agent framework) up to and including 2.5.8 lets attackers run arbitrary code and OS commands on the host by way of prompt injection. The PythonTools and ShellTools components feed LLM-generated arguments straight into exec(), runpy.run_path(), and subprocess.run() without sanitization, so an attacker who plants malicious instructions in any content the agent ingests (a web page, a document) can hijack execution. CVSS is rated 9.8 and the CVSS vector marks it unauthenticated/network, but no public exploit is identified at time of analysis and EPSS is low at 0.60% (46th percentile).
Command injection in the LB-Link AC2100_AZ3 (V1.0.4) router allows attackers to run arbitrary operating-system commands by supplying shell metacharacters to the bs_SetLimitCli_info function in the libshare.so library, which passes unsanitized input into a system-level command context. Successful exploitation yields full compromise (confidentiality, integrity, availability) of the device, typically at elevated/root privilege given the embedded-Linux design. A public technical write-up documenting the flaw exists on GitHub, but it is not listed in CISA KEV and EPSS estimates exploitation probability at a modest 0.54% (43rd percentile).
OS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged authenticated users. The CWE-78 root cause indicates that user-controlled input is passed unsanitized to OS-level shell commands exposed through a network-accessible interface. Dell confirmed this in advisory DSA-2026-369; no public exploit or CISA KEV listing has been identified at time of analysis, though the full C:H/I:H/A:H impact profile makes this a high priority for any organization running this data protection platform.
OS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to execute arbitrary operating system commands on the underlying host. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms network-accessible exploitation requiring only a valid low-privileged credential, with full confidentiality, integrity, and availability impact on the vulnerable system. No public exploit code or active exploitation has been identified at time of analysis.
OS command injection in Dell Cloud Disaster Recovery versions 20.2 and prior allows a high-privileged remote attacker to execute arbitrary operating system commands via the product's REST API, resulting in full system compromise. The vulnerability is rooted in insufficient sanitization of special characters within API inputs (CWE-78) and is reachable over the network without user interaction. No public exploit code or active exploitation has been identified at time of analysis; Dell has released a security advisory (DSA-2026-353) addressing the issue.