Command Injection
Monthly
OS command injection in Dell Cloud Disaster Recovery (versions 20.2 and prior) lets an already high-privileged, remote user smuggle special shell characters into a command the product executes on the underlying host, resulting in arbitrary command execution. Dell rates it CVSS 9.1 with a scope change, meaning the injected commands can escape the application's authorization boundary onto the host OS. No public exploit identified at time of analysis and the flaw is not on CISA KEV, so severity is driven by impact rather than confirmed activity.
Arbitrary CI command execution in GitLab Enterprise Edition allows an authenticated developer-role user to run unauthorized commands within a CI pipeline context across all EE versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1. The root cause is CWE-829 (Inclusion of Functionality from Untrusted Control Sphere): a Claude AI agent integration within GitLab EE processes CI pipeline configuration drawn from a user-controlled source without adequate isolation, enabling instruction injection into the agent's execution context. A public proof-of-concept is confirmed via HackerOne report 3863650, though SSVC and EPSS signals indicate no observed widespread active exploitation at time of analysis.
Remote command injection in Ubiquiti's UniFi Talk Application lets a network-positioned attacker run arbitrary commands on the underlying host device due to improper input validation (CWE-20). Ubiquiti rates it CVSS 10.0 with a changed scope, meaning a successful attack escapes the application boundary to fully compromise the host. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in the Ubiquiti UniFi Enterprise Audio/Video Bridge allows a network-adjacent attacker to run arbitrary operating-system commands on the device by supplying maliciously crafted input that the firmware fails to validate. The CVSS 3.1 base score is 9.8 and the vector marks the flaw as network-reachable with no authentication or user interaction, yielding full confidentiality, integrity, and availability compromise. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Command injection in Ubiquiti's UniFi Protect Application lets a network-adjacent attacker holding only low-privileged credentials run arbitrary OS commands on the underlying host device. The CVSS 3.1 base score is 9.9 with a scope change, reflecting that a foothold in the application escalates into full control of the host operating system. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but the near-maximal score and low exploitation barrier make it a high-priority patch.
Command injection in Ubiquiti's UniFi Access Application allows a low-privileged attacker with network access to run arbitrary operating-system commands on the underlying host device. The flaw stems from improper input validation (CWE-20) and carries a critical CVSS 9.9 with a scope change, meaning application-level compromise pivots to full control of the host. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.
OS command injection in Ubiquiti's UniFi Access Application allows a low-privileged attacker with network reach to run arbitrary commands on the underlying host. Because the CVSS scope is marked Changed with full High confidentiality, integrity, and availability impact, successful exploitation moves beyond the application into the host device itself. No public exploit has been identified at time of analysis and the flaw is not on CISA KEV, but the 9.9 severity and low attack complexity make it a top-priority patch.
Command injection in Ubiquiti's UniFi Access Application allows an authenticated attacker with low privileges and network access to execute arbitrary OS commands on the host device. Rated CVSS 9.9 with a scope change, the flaw stems from improper input validation and lets a low-privileged user break out of the application to compromise the underlying host. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti's UID Enterprise Agent lets a high-privileged, network-adjacent actor run arbitrary OS commands on the host device by supplying improperly validated input. The flaw carries a CVSS 9.1 rating driven by a scope change and full compromise of confidentiality, integrity, and availability, though exploitation requires existing high privileges (PR:H). No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti UniFi OS Server allows an attacker holding high-privilege access and network reachability to execute arbitrary operating-system commands on the underlying host, per Ubiquiti Security Advisory Bulletin 067. The flaw stems from improper input validation (CWE-20) and, with a scope-changed CVSS 9.1, lets a compromised or malicious privileged account break out of the application context to fully control the host. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti UniFi OS Server allows an attacker holding high-privilege (administrative) access on the network-reachable management interface to break out of the application and run arbitrary operating-system commands on the underlying host device. The flaw stems from improper input validation (CWE-20) and carries a vendor-assigned CVSS of 9.1, driven largely by a scope change from application to host. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the only source is Ubiquiti's own Security Advisory Bulletin 067.
Command injection in Ubiquiti UniFi Protect Application lets a network-positioned, unauthenticated attacker run arbitrary OS commands on the underlying host device, per the CVSS:3.1/AV:N/PR:N/UI:N vector and CWE-20 improper input validation root cause. The maximal 10.0 score reflects full confidentiality, integrity, and availability compromise with a scope change (S:C), meaning code executes on the host beyond the application boundary. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but the trivial complexity and lack of authentication make it a top-priority patch for any exposed NVR.
Authenticated command injection in Ubiquiti's UniFi Network Application (the controller software managing UniFi network gear) allows an attacker holding high-privilege access on the network to inject and execute operating-system commands on an adopted device managed by the controller. Because the injected command runs on a downstream device rather than the controller itself, the flaw crosses a trust boundary (CVSS scope change) and yields full confidentiality, integrity, and availability impact on the target device. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Command injection in TeamViewer Full Client and Host for Linux (prior to version 15.81.5) allows remote attackers to execute arbitrary OS commands as the current user by sending a crafted URL through the out-of-session chat feature. The attack exploits CWE-78 (OS Command Injection) in the Linux URL-handling path and requires only that the victim click the malicious link - no attacker authentication is needed. No public exploit has been identified at time of analysis; the vendor has released a patch in version 15.81.5 per advisory TV-2026-1009.
Command injection in Ubiquiti's UniFi Protect Application lets a low-privileged, network-adjacent user run arbitrary operating-system commands on the host device (typically a UniFi NVR, Cloud Key, or Dream Machine running the Protect service). The CVSS 3.1 score of 9.9 reflects a scope change: an attacker who already holds a low-privilege application account escapes the application boundary to gain full control of the underlying host. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Command injection in LibreNMS's Virtualization Discovery module enables authenticated administrator-level users to execute arbitrary OS commands on the underlying host server. Covering all tracked versions per CPE cpe:2.3:a:librenms:librenms:*, this CWE-78 flaw was disclosed by PRJBLK alongside a publicly available proof-of-concept exploit targeting version 26.5.0. No CISA KEV listing was identified at time of analysis, but the public PoC materially lowers the exploitation bar for any attacker who already holds admin credentials.
OS command injection in ClipBucket V5's web installer (versions 5.5.1 through 5.5.3-#153) lets unauthenticated remote attackers run arbitrary shell commands as the web server user by supplying a crafted php_cli_filepath value in a POST request to the installer. The flaw stems from the installer passing this parameter unescaped into a shell command that invokes the PHP CLI. A vendor patch exists (commit 36e7c6c), it was reported by VulnCheck, and no public exploit has been identified at time of analysis.
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating system commands through the application's status and logs plugin command interfaces. The CVSS 7.8 score reflects high impact across confidentiality, integrity, and availability with low attack complexity and no user interaction required. No public exploit identified at time of analysis, and no CISA KEV listing observed, but the fully unscopeed local impact makes this a meaningful risk on multi-tenant or shared Linux systems running NemoClaw.
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to execute arbitrary operating system commands with the privileges of the targeted process. All versions of NemoClaw are indicated as affected per NVD CPE data (wildcard version range). Successful exploitation can result in full code execution, persistent data tampering, sensitive information disclosure, and denial of service on the host. No public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to execute arbitrary operating system commands, leading to full compromise of confidentiality, integrity, and availability. All versions of NemoClaw appear affected per the CPE wildcard (*), and the vulnerability is rooted in improper neutralization of user-supplied input passed to shell commands (CWE-78). No public exploit code and no CISA KEV listing have been identified at time of analysis, limiting current real-world risk primarily to environments with untrusted local users.
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privileged access to execute arbitrary operating system commands. Exploitation yields full confidentiality, integrity, and availability compromise on the affected host, with potential for privilege escalation beyond the invoking user. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, but the low attack complexity (AC:L) and minimal privilege requirement (PR:L) lower the practical bar for exploitation once local access is obtained.
OS command injection in NVIDIA OpenShell across all supported platforms allows a network-accessible malicious gateway to execute arbitrary operating system commands on a victim host when a user interacts with that gateway. The CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R) reflects that an attacker requires no privileges on the victim system but does require the victim to interact with a malicious or attacker-controlled gateway endpoint. Successful exploitation yields full code execution, data tampering, and information disclosure - with no public exploit or CISA KEV listing identified at time of analysis.
Blind SSRF in Chainlit's MCP endpoint allows unauthenticated remote attackers to force the server to issue outbound HTTP requests to arbitrary internal or external URLs - including cloud metadata endpoints (e.g., AWS IMDSv1 at 169.254.169.254) - with fully attacker-controlled HTTP headers including Authorization and Cookie. Affected versions span 2.4.0rc0 through 2.11.x; the amplified form with attacker-controlled header forwarding affects 2.6.4 through 2.11.x, enabling state-changing authenticated requests against internal APIs without requiring any response read-back. Publicly available exploit code exists, confirmed against Chainlit 2.11.0 by SPL Security researchers; no CISA KEV listing is present at time of analysis.
Unauthenticated remote code execution in Chainlit (2.4.0rc0 through 2.11.x) occurs when features.mcp.enabled is set to true, exposing the POST /mcp endpoint that accepts a user-controlled stdio command string. Because the allowlist only validates the executable name and passes arguments unchecked, an attacker can supply 'npx -y -c <payload>' to run arbitrary shell commands as the Chainlit process. Publicly available exploit code exists (working PoC from the reporting researchers and in the advisory); it is not listed in CISA KEV, and MCP has been disabled by default since v2.7.0, limiting the exposed population.
Arbitrary code execution in Adobe Campaign Classic (ACC) arises from OS command injection (CWE-78), letting an attacker run arbitrary commands in the context of the running user. The flaw is rated CVSS 10.0 with a network attack vector, no privileges, no user interaction, and a scope change reaching the underlying host. No public exploit identified at time of analysis, but the maximal score and unauthenticated network reach make it a top-tier patching priority.
OS command injection in Adobe Campaign Classic (ACC) allows an attacker to execute arbitrary operating-system commands, achieving code execution in the context of the current user with a scope change that extends impact beyond the vulnerable component. Adobe (the reporting vendor) rates this maximum severity CVSS 10.0 (CWE-78), and exploitation requires no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is a vendor-disclosed, not-yet-actively-exploited critical flaw.
Arbitrary code execution in Emacs TRAMP affects Red Hat Enterprise Linux 6 through 10 via a local command injection flaw in the TRAMP remote file access subsystem. TRAMP concatenates user-influenced login arguments - including filenames - without sanitization before passing them to a local shell, enabling a low-privileged local attacker to inject shell commands that execute with the victim process's privileges. No public exploit code or CISA KEV listing is identified at time of analysis, but the low attack complexity and no-user-interaction requirement make this a credible local privilege escalation vector on multi-user RHEL systems.
Code injection in NVIDIA Unified Fabric Manager Enterprise's plugin management API allows low-privileged, adjacent-network authenticated users to execute arbitrary commands on the UFM host by submitting a specially crafted API request. All current release tracks - GA, LTS 2023, LTS 2024, and LTS 2025 - are confirmed affected per vendor-supplied CPE data. Successful exploitation yields code execution, privilege escalation, and information disclosure on a platform that controls InfiniBand fabric infrastructure, amplifying downstream impact on managed HPC and AI compute clusters. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unrestricted OS command execution in mcp-shell prior to v0.6.0 allows any LLM connected via stdio to invoke the shell_exec tool with arbitrary command strings, running them as the mcp-shell process user with no filtering, allowlisting, or logging. The root cause is that config.go initializes SecurityConfig.Enabled to false and SecurityValidator.validateCommand unconditionally short-circuits when that flag is false, bypassing all CWE-78-class protections. Both the from-source installation path and the MCP client configuration example in the README omit MCP_SHELL_SEC_CONFIG_FILE, making every operator who follows the documented instructions unknowingly vulnerable. No CISA KEV listing or independent public exploit repository has been identified at time of analysis; a vendor-confirmed fix is available in v0.6.0.
Arbitrary OS command execution in mcp-shell's default Docker image allows any MCP tool caller to bypass the secure-mode executable allowlist by supplying `/bin/bash -c <payload>` to the `shell_exec` tool, running commands as `mcpuser` (UID 1000) inside the container. The validator in `security.go` extracts only the first whitespace-delimited token as the executable, approves `/bin/bash` against the default allowlist, and passes the `-c` flag through the metacharacter check unchallenged because the default `blocked_patterns` array is empty. A fully working PoC is included in the GitHub Security Advisory GHSA-3x77-wg38-92r3; no public exploit identified at time of analysis beyond the researcher-provided PoC, and no CISA KEV listing exists. Vendor-released patch v0.6.0 is confirmed.
OS command injection in mcp-shell's 'secure mode' allows any MCP client to execute arbitrary shell commands by exploiting Git's runtime alias mechanism. The security validator in security.go blocks common shell metacharacters but omits '!', the prefix Git uses to invoke shell aliases via '-c alias.NAME=!CMD'. Because /usr/bin/git is in the default allowed_executables list and the CVSS PR:N vector confirms no authentication is required, all default Docker deployments (mcpuser, UID 1000, Git pre-installed) are exploitable by any entity with MCP connectivity. A fully functional PoC is published in the GHSA advisory; no CISA KEV listing is present at time of analysis.
Remote code execution in Weidmueller IE-SR-2TX-WL industrial security routers allows an unauthenticated network attacker to run arbitrary OS commands as root via the web management interface. The modified uhttpd server passes the HTTP Basic Authentication username directly into a shell command, so a crafted username containing shell metacharacters yields full device compromise. No public exploit identified at time of analysis, but the flaw is trivially exploitable and carries a CVSS 4.0 base score of 9.3 (Critical).
Stored OS command injection in the TP-Link Archer BE3600 V1 parent-control module allows an authenticated administrative attacker on the adjacent network to achieve arbitrary command execution on the device. The payload is persisted at configuration time-embedded in a crafted profile name-and fires asynchronously when the router's daily cloud report generation job runs, without any further attacker interaction. A vendor-released patch is available from TP-Link; no public exploit has been identified at time of analysis.
Root-level command injection in the TP-Link Archer BE800 V1 router (firmware prior to 1.4.2 Build 260708) allows an authenticated administrator on an adjacent network to execute arbitrary OS commands with root privileges by injecting shell metacharacters through the VPN connection interface. Successful exploitation hands an attacker full control of the embedded Linux environment, enabling persistent backdoors, credential theft, and use of the router as a pivot into the connected LAN. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released firmware patch is available.
Unauthenticated OS command injection in TP-Link Archer BE800 V1, BE3600 V1, and AX75 V1 routers allows any LAN-adjacent attacker to execute arbitrary commands with root privileges via the parental control subsystem. Exploitation requires no credentials and no user interaction, resulting in complete device compromise including full control over routing, firewall policy, and all traffic transiting the device. Vendor-released firmware patches are available for all three affected models; no public exploit code or CISA KEV listing has been identified at time of analysis.
Command injection in DrayTek VigorSwitch's setDevNet function allows authenticated remote attackers to execute arbitrary OS commands with root privileges by supplying crafted username or password values. At least ten VigorSwitch models are confirmed affected via CPE data, with the full tag list extending coverage to approximately 28 model variants. No public exploit code or CISA KEV listing has been identified at time of analysis, but the vulnerability class (CWE-78) and the root-level impact make it high priority for any DrayTek VigorSwitch deployment where administrative credentials may be compromised or shared.
Command injection in DrayTek VigorSwitch's tftp_upgrade function enables authenticated remote administrators to execute arbitrary OS commands with root privileges. At least 28 VigorSwitch models across DrayTek's managed switch lineup are affected, spanning both Gigabit and PoE/fiber variants. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the CVSS 4.0 score of 8.6 reflects high impact across confidentiality, integrity, and availability once administrative access is leveraged.
Command injection in DrayTek VigorSwitch's setTime function enables authenticated administrators to execute arbitrary OS commands with root privileges across at least ten confirmed models, with tags suggesting up to 28 additional affected variants. The flaw stems from insufficient input sanitization of username and password fields before shell execution, a classic CWE-78 pattern. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation is gated behind valid administrative credentials, per the CVSS PR:H rating and vendor description.
Command injection in multiple DrayTek VigorSwitch models enables authenticated administrators to execute arbitrary OS commands with root privileges through the setDevProto function's unsanitized username and password fields. At least 10 CPE-confirmed models are affected, with vendor tags suggesting a broader footprint of approximately 28 VigorSwitch variants. No public exploit code or CISA KEV listing has been identified at time of analysis; however, DrayTek published a security advisory in August 2026 acknowledging the vulnerability and the authentication prerequisite of valid admin credentials is the primary constraint on real-world exploitation.
Command injection in DrayTek VigorSwitch firmware's fdftDevice function allows an authenticated remote administrator to execute arbitrary OS commands with root privileges by supplying crafted input in the username or password fields of the web management interface. Approximately 28 VigorSwitch models across the G, P, Q, and PQ series are affected, confirmed by both VulnCheck reporting and a DrayTek vendor advisory published August 2026. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Command injection in DrayTek VigorSwitch's rebDevice function allows authenticated remote attackers with valid administrative credentials to execute arbitrary OS commands with root privileges by submitting crafted username or password values through the web management interface. At least 10 VigorSwitch models are confirmed affected per CPE data, with tags suggesting coverage across roughly 28 distinct models spanning the G, P, Q, PQ, and FX product lines. No public exploit or CISA KEV listing has been identified at time of analysis, though the advisory originates from a VulnCheck disclosure coordinated with a DrayTek security bulletin dated August 2026.
Command injection via the setDevice function affects multiple DrayTek VigorSwitch managed switch models, allowing an authenticated remote administrator to execute arbitrary OS commands with root privileges by supplying unsanitized input in the username, password, or location fields. The breadth of affected hardware - at least 28 distinct VigorSwitch SKUs spanning G, P, PQ, Q, and FX series - substantially widens the organizational exposure surface. No public exploit code or CISA KEV listing has been identified at time of analysis, but the network-accessible management interface and high-impact outcome make this a meaningful post-compromise escalation path.
Command injection in multiple DrayTek VigorSwitch models' getDetail function enables authenticated remote attackers holding valid administrative credentials to execute arbitrary OS commands with root privileges. The flaw (CWE-78) arises from the web management interface failing to sanitize username and password fields before incorporating them into system command execution. DrayTek published a security advisory in August 2026 covering a broad range of VigorSwitch models; no public exploit code or CISA KEV listing has been identified at time of analysis.
Command injection in DrayTek VigorSwitch's getVid function allows an authenticated remote administrator to execute arbitrary OS commands with root privileges by supplying crafted values in the username or password fields of the web management interface. At least 28 VigorSwitch models across the G, P, Q, PQ, and FX series are confirmed affected by the DrayTek August 2026 security advisory and VulnCheck reporting. No public exploit code has been identified at time of analysis, but the breadth of affected models and full root-level impact make this a patch-priority item for any organization operating DrayTek managed switching infrastructure.
Command injection in DrayTek VigorSwitch managed switches allows an authenticated remote attacker holding administrative credentials to execute arbitrary OS commands with root privileges by supplying crafted input to the auth_set function via the web management interface. At least 28 distinct VigorSwitch model lines are affected across DrayTek's G, P, PQ, Q, and FX series, with the vulnerability reported by VulnCheck and acknowledged via a DrayTek security advisory in August 2026. No public exploit code has been identified and the vulnerability is not listed in CISA's KEV catalog at time of analysis; the CVSS 4.0 score of 8.6 with PR:H accurately reflects that valid administrative credentials are a prerequisite, materially limiting opportunistic mass exploitation.
Pre-authentication OS command injection in DrayTek VigorSwitch managed switches lets a remote, unauthenticated attacker run arbitrary commands as root by supplying crafted input to the setget.cgi 'pass' field, which is passed to a shell without sufficient filtering. The flaw affects a broad range of VigorSwitch models (G/P/Q-series including G2540Xs, P2282X, Q2300X, G2542X and ~30 listed variants) and carries a CVSS 4.0 score of 9.3. No public exploit has been identified at time of analysis, but DrayTek has published a security advisory addressing it.
Command injection in multiple DrayTek VigorSwitch managed switch models allows an authenticated remote administrator to execute arbitrary OS commands with root privileges via the web management interface. The flaw resides in the sysreboot function, which fails to sanitize the config, act, pathN, and valueN parameters before passing them to OS command execution, per CWE-78. No public exploit or CISA KEV listing exists at time of analysis, but the VulnCheck and DrayTek advisories confirm the vulnerability across at least 28 VigorSwitch SKUs.
Command injection in the DrayTek VigorSwitch `webBackupAction` function allows authenticated remote attackers to execute arbitrary OS commands with root privileges across more than 25 managed switch models. Insufficient input sanitization of the `option`, `key`, `pw_encode`, `pathN`, and `valueN` parameters enables shell metacharacter injection, resulting in full device compromise. No public exploit has been identified at time of analysis; the administrative credential prerequisite is the primary barrier against opportunistic exploitation.
Command injection in the DrayTek VigorSwitch series' pingtrace diagnostic function allows an authenticated administrator to execute arbitrary OS commands with root privileges by submitting a crafted host field value. Twenty-eight distinct VigorSwitch models across the G, P, Q, PQ, FX, and PX series are affected, with patched firmware releases varying by model family (2.9.10, 2.10.6, 2.10.7, and 3.10.6). No public exploit has been identified at time of analysis and CISA has not listed this in KEV; exploitation is constrained by the mandatory administrative credential requirement confirmed by the CVSS PR:H metric.
Command injection via the commandTable function affects 28 DrayTek VigorSwitch managed switch models across multiple firmware branches, allowing an authenticated administrator to execute arbitrary OS commands with root privileges on the device. The root cause is incomplete sanitization of shell metacharacters - specifically backticks, newline characters, and single quotes - in a parameter field processed by the web management interface. Exploitation requires valid administrative credentials; patch available per DrayTek's August 2026 security advisory. No public exploit has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Command injection in DrayTek VigorSwitch's jsonstatus function allows authenticated remote administrators to execute arbitrary OS commands as root by submitting crafted values in the usescript, usefile, or option fields. At least 28 distinct VigorSwitch models across multiple firmware branches are confirmed affected per EUVD-2026-64974 and vendor advisory. Vendor-released patches are available; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Root-level OS command injection in DrayTek VigorAP wireless access points (models 903, 906, 912C, 918R, 960C, 1060C) lets a remote, unauthenticated attacker run arbitrary commands by sending a crafted UDP message to the dray_apm component after a START_SPEED_TEST request. The flaw stems from missing validation of UDP payload content before it is passed to command execution, and the CVSS 4.0 base score of 9.3 reflects full compromise of confidentiality, integrity, and availability. It was reported by VulnCheck, a vendor patch is available, and no public exploit has been identified at time of analysis.
Command injection in multiple DrayTek VigorAP access point models allows an authenticated remote attacker with administrative credentials to execute arbitrary OS commands as root via a crafted restorekey parameter in the upload_settings.cgi endpoint. Six VigorAP hardware models share the vulnerable codebase: 903, 906, 912C, 918R, 960C, and 1060C. Vendor firmware patches are available for all affected models; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Command injection in the apautotest function of multiple DrayTek VigorAP access point models allows a remote attacker holding valid administrative credentials to execute arbitrary OS commands with root privileges. Six CPE-confirmed models across the VigorAP 903, 906, 912C, 918R, 960C, and 1060C series are affected in all firmware versions below their respective patch thresholds. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches are available and should be applied promptly given the root-level impact.
Command injection in DrayTek VigorAP series access points (models 903, 906, 912C, 918R, 960C, and 1060C) allows an authenticated remote attacker to execute arbitrary OS commands with root privileges by submitting crafted input to the InquierTime function's time field via the web management interface. The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command) - the time parameter is passed to a system shell without adequate filtering, enabling shell metacharacter injection. No public exploit identified at time of analysis; a vendor-released patch is available across all affected model lines.
Command injection in DrayTek VigorAP mesh networking firmware allows authenticated remote administrators to execute arbitrary OS commands with root privileges across six VigorAP models. The vulnerability exists in the mesh_start_speed_test function, where unsanitized meshdevice_index and meshdevice_ip input is passed directly to shell command execution, yielding complete device compromise including full confidentiality, integrity, and availability impact. Vendor-released patches are available for all affected models; no public exploit code or CISA KEV listing has been identified at time of analysis.
Command injection in DrayTek VigorAP series wireless access points allows authenticated remote administrators to execute arbitrary OS commands with root privileges by submitting crafted input to the setcamset function via the web management interface. Six distinct VigorAP models are confirmed affected across multiple firmware branches, each with a separate patch target version released in August 2026. No public exploit identified at time of analysis, but the network-accessible attack vector and root-level impact make this a high priority for organizations with internet-exposed VigorAP management interfaces.
Command injection in multiple DrayTek VigorAP access point models allows a remote attacker holding valid administrative credentials to execute arbitrary OS commands as root by submitting malicious input to the setLan function's lanIp or lanNetmask parameters. Six models spanning several firmware lines are confirmed affected, with vendor patches now available for all of them per the August 2026 DrayTek security advisory. No public exploit code has been identified and the vulnerability is absent from the CISA KEV catalog, but the root-level code execution outcome warrants prompt firmware upgrade wherever management interfaces are network-reachable.
Command injection in DrayTek VigorAP series access points allows an authenticated remote attacker with administrative credentials to execute arbitrary OS commands as root via the ExportSettings function. Insufficient input sanitization of the backupkey, backuptype, and realtime parameters permits shell metacharacter injection before those values are passed to a system command. No public exploit or CISA KEV listing exists at time of analysis, but SSVC rates technical impact as total given root-level code execution on network infrastructure devices.
Command injection in multiple DrayTek VigorAP firmware models allows authenticated remote attackers with administrative credentials to execute arbitrary OS commands as root via the tr069TestInform function. Six models are confirmed affected - VigorAP 903, 906, 912C, 918R, 960C, and 1060C - with vendor-patched firmware available at model-specific versions. No public exploit code has been identified at time of analysis, but the straightforward nature of CWE-78 OS command injection against a root-privileged process means exploitation is trivial for any attacker who has obtained valid admin credentials.
Command injection in Black Duck blackduck-c-cpp before version 3.0.7 enables any actor with write access to a scanned build directory to execute arbitrary OS commands as the account running the scan. The scanner's package manager component traverses the build directory and incorporates discovered filesystem paths into shell command strings without quoting or escaping, making any file or directory whose name contains shell metacharacters an effective injection vector. No public exploit code or active exploitation is confirmed at time of analysis, but the mechanic is standard shell injection requiring no specialized tooling, making this a meaningful risk in shared CI/CD environments where untrusted parties can write to scanned directories.
OS command injection in Sakura Editor (Windows text editor) enables arbitrary command execution on a victim's PC when they open a file from an attacker-crafted directory and invoke the 'Open Terminal' (Open PowerShell) feature. The vulnerability, tracked as JVN#74538868 and GHSA-6x2x-729r-wjh5 and reported by JPCERT, requires social engineering to place the victim's file in a path containing injected shell metacharacters. No public exploit identified at time of analysis and no CISA KEV listing, but the full-compromise impact (C:H/I:H/A:H on the vulnerable system) warrants prompt patching to v2.4.3.
OS command injection in 4MOSAn GCB Doctor allows unauthenticated remote attackers to execute arbitrary system commands via a leftover ADOdb test page whose parameter is passed into a shell context. The vulnerable component is a debug/test artifact (an ADOdb connection test page) that was never removed from production builds, so any internet-reachable instance before build 20260621 is exploitable with a single crafted request. No public exploit has been identified at time of analysis, but the CVSS 4.0 base score of 9.3 and the fully unauthenticated network vector make this a high-priority patch.
Command injection in better-npm-audit through 3.11.0 (and the 4.0.0-rc.2 prerelease) allows arbitrary OS command execution when a value containing shell metacharacters is supplied to the --registry CLI flag. The vulnerability exists because handleInput.ts interpolates the raw registry value into a shell command string that is then passed to Node.js child_process.exec(), which spawns a system shell and interprets metacharacters such as semicolons, pipes, and backticks as command separators or substitutions. No confirmed active exploitation or CISA KEV listing exists at time of analysis, but the vulnerable code path is publicly documented in GitHub issue #119 and the diff of PR #120, significantly lowering the barrier to exploit development.
Command injection in UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 allows an attacker who controls /etc/passwd entries on a target system to execute arbitrary commands on a forensic analyst's host machine. The vulnerability targets the DFIR tool itself rather than the system under investigation: when an analyst runs UAC against a compromised host, crafted usernames or home directory paths containing shell metacharacters are substituted into command strings and passed to eval without sanitization in parse_artifact.sh. This creates a novel attacker-pivots-to-analyst scenario with no public exploit identified at time of analysis, but the attack chain is straightforward given /etc/passwd write access on the investigated system.
Command injection in UAC (Unix-like Artifacts Collector) versions before 3.3.0 allows an attacker who controls evidence under forensic analysis to execute arbitrary commands on the investigating analyst's own host system. The _command_collector function substitutes placeholders such as %user%, %user_home%, and %line% into shell command strings via sed without sanitizing shell metacharacters, then passes the result to eval - enabling malicious filenames or artifact definitions to inject and execute arbitrary shell code on the analyst's workstation. No CISA KEV listing or public exploit code has been identified at time of analysis; vendor patch is available in 3.3.0 per GitHub commit 2cc367d.
Command injection in UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 enables arbitrary command execution on a forensic analyst's workstation when processing evidence containing attacker-controlled data. The root cause is unsafe use of shell `eval` to expand untrusted placeholders - including `%user%`, `%user_home%`, `%line%`, and `%mount_point%` - in the `_run_command` function, allowing shell metacharacters or command substitutions embedded in usernames, filenames, or artifact definitions to execute in the analyst's shell context. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 3.3.0.
Remote command injection in Comfast CF-N1-S firmware 2.6.0.1 allows a low-privilege authenticated attacker to execute arbitrary OS commands via the NTP timezone configuration CGI endpoint by supplying unsanitized shell metacharacters in the `timestr` parameter. The CVSS 4.0 vector scores 8.6 with full high-impact ratings across confidentiality, integrity, and availability on both the vulnerable device and subsequent systems, reflecting potential for complete device takeover. A public proof-of-concept exploit is available on GitHub, materially lowering the skill threshold for exploitation with no confirmed patch at time of analysis.
Command injection in Cloud Foundry's BOSH CLI on Windows enables an adjacent-network attacker to execute arbitrary shell commands - specifically via PowerShell injection - without requiring authentication. The vulnerability affects all tracked versions of the BOSH CLI (cpe:2.3:a:cloud_foundry_foundation:bosh_cli) when deployed on Windows hosts, resulting in full confidentiality, integrity, and availability compromise of the affected system. No public exploit code or CISA KEV listing has been identified at time of analysis, but the high-impact CVSS vector (7.5) and the specificity of the PowerShell injection vector indicate meaningful risk for Cloud Foundry operators running BOSH on Windows.
OS command injection in Apache CloudStack's NAS backup provider plugin enables an authenticated operator account to execute arbitrary commands on KVM hypervisor hosts by supplying unsanitized shell metacharacters to the addBackupRepository or updateBackupRepository management APIs. Affected deployments span versions 4.20.0.0 through 4.22.1.0 when the NAS backup provider plugin is in use; exploitation is deferred and triggered when any downstream account performs a backup restore. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation status as 'none,' though technical impact is rated 'total' given hypervisor-level code execution.
Cross-tenant root command execution in Apache CloudStack (4.14.0.0-4.20.3.0 and 4.21.0.0-4.22.1.0) allows an authenticated tenant holding only the default User role to run arbitrary shell commands as root on the KVM hypervisor host, which also runs other tenants' VMs. The flaw stems from CloudStack fetching a user-supplied .metalink file during directDownload template registration and dispatching its inner URLs to the KVM agent without re-validating them against the scheme allowlist; a related SSRF variant lets the Secondary Storage VM retrieve internal targets and persist them as downloadable templates. No public exploit identified at time of analysis, and no CVSS is provided by the vendor.
Command injection in Apache CloudStack's diagnostics APIs allows Admin-role authenticated users to execute arbitrary commands as root on system VMs and Virtual Routers, constituting a full compromise of those instances across versions 4.20.0.0-4.20.3.0 and 4.21.0.0-4.22.1.0. The getDiagnosticsData and runDiagnostics API endpoints fail to properly neutralize special shell characters in user-supplied input before passing it to underlying diagnostic processes on the target VMs. No public exploit code or CISA KEV listing has been identified at time of analysis, but successful exploitation of a Virtual Router can expose all guest network traffic routed through that instance and provide a lateral movement foothold within the CloudStack-managed infrastructure.
OS command injection in the Datiphy Data Management Center API endpoint (versions v8.3.0 through v8.5.1) lets an authenticated administrator run arbitrary operating-system commands as root, escalating application-level admin rights into full host compromise. Rated CVSS 4.0 9.4 (Critical) and reported by ZUSO ART, the flaw yields high confidentiality, integrity, and availability impact on both the vulnerable and subsequent systems. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker run arbitrary operating-system commands due to improper neutralization of special elements (CWE-78). IBM PSIRT rates it CVSS 9.9 with a scope change, reflecting that an authenticated foothold can be escalated into full host compromise across the confidentiality, integrity, and availability dimensions. No public exploit identified at time of analysis and it is not listed in CISA KEV, so the current threat is potential rather than confirmed in-the-wild activity.
OS command injection in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 enables remote attackers holding low-privilege credentials to execute arbitrary OS commands on affected systems. The CWE-78 root cause - improper neutralization of shell-special characters before they reach an OS command - means a valid but unprivileged account is sufficient to achieve full confidentiality, integrity, and availability compromise. No public exploit code or active exploitation has been identified at time of analysis, though the SSVC framework rates the technical impact as total.
OS command injection in OTRS Community Edition's PGP encryption module allows authenticated administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options, which are concatenated unsanitized into a shell command invoked during normal ticket operations. Exploitation requires pre-existing administrator-level access to the OTRS admin panel and is triggered automatically once a malicious configuration is saved and a PGP-involving ticket operation occurs. No public exploit has been independently confirmed beyond a researcher disclosure blog, and the vulnerability is not listed in CISA KEV at time of analysis.
OS command injection in Laravel Backpack CRUD's Stats::makeCurlRequest method allows unauthenticated remote attackers to execute arbitrary OS commands as the web server user by supplying a crafted HTTP Host header. All four maintained branches are affected: 4.1.x before 4.1.72, 5.x before 5.6.2, 6.x before 6.8.13, and 7.x before 7.0.36. No public exploit code or CISA KEV listing exists at time of analysis, but the only in-code guard is a 1-in-100 probabilistic gate that provides no meaningful protection against a determined attacker who can retry requests.
Pre-authentication OS command injection in TP-Link Omada gateways (ER-series and DR-series VPN routers) lets an unauthenticated remote attacker execute arbitrary commands when the device is configured as an OpenVPN Server, because client-supplied data is insufficiently validated during OpenVPN connection establishment before authentication completes. Successful exploitation can yield full device compromise (CVSS 4.0 9.3, CWE-78). No public exploit has been identified at time of analysis, and the flaw was reported by the vendor (TP-Link) itself.
Command injection in the Sony XAV-9500ES car audio receiver firmware 3.02.00 allows a local attacker with low-privileged code execution to escalate to root via the device's crash dump handler. The handler passes user-controlled input directly to an OS system call without sanitization (CWE-78), enabling arbitrary command execution at the highest privilege level. Disclosed by ZDI as ZDI-26-477 (ZDI-CAN-29061); no public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Local privilege escalation in Kenwood DNR1007XR network video recorder devices allows a low-privileged local attacker to achieve root-level code execution by exploiting command injection in the JKGenService service. The flaw (CWE-78) exists because user-supplied input is passed without sanitization to a system call, enabling shell metacharacter injection. No public exploit has been identified at time of analysis, and the device is not listed in CISA KEV, but successful exploitation yields full system compromise on the affected hardware.
Remote code execution via OS command injection in NoMachine's web service allows authenticated remote attackers to execute arbitrary commands as the service account. The flaw, tracked by Zero Day Initiative as ZDI-CAN-30634 (ZDI-26-483), exists within the getstat command handler of the web service listening on TCP port 4000 by default, where user-supplied input is passed unsanitized to a system call. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in CISA KEV, though the CVSS score of 8.8 and full C/I/A impact make this a genuine remediation priority for any organization using NoMachine for remote access.
Arbitrary OS command execution via ODMDIR environment variable manipulation affects IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1, enabling local authenticated users to escalate privileges beyond their initial access boundary. The CVSS scope change (S:C) indicates that successful exploitation can compromise components outside the immediate process context - a critical concern for AIX systems hosting sensitive workloads. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but a vendor patch is available through IBM's support portal.
Privilege escalation in Ubuntu's accountsservice package allows a local low-privileged user to execute arbitrary shell commands as root (real UID 0) by injecting a GNU sed 'e' flag payload into their ~/.pam_environment LANGUAGE entry, which is then processed unsanitized by Ubuntu-specific helper scripts (save-to-pam-env, update-langlist) when the SetLanguage D-Bus method is invoked. All Ubuntu accountsservice packages before version 23.13.9-8ubuntu7 are affected; this is a Ubuntu-specific packaging defect, not an upstream accountsservice issue. No public exploit code or CISA KEV listing has been identified at time of analysis, though the attack path is well-described and technically straightforward.
Arbitrary OS command execution in Neo.mjs (versions prior to commit 88c77fc4) arises in the ai/mcp/server/file-system MCP server, whose FileSystemService.mjs passes a caller-supplied absolutePath into a shell via exec() inside checkSyntax() and runPlaywrightTest(). An attacker who can steer an AI agent into calling these MCP tools with a path containing shell metacharacters runs commands with the privileges of the MCP server process. No public exploit is identified at time of analysis and the flaw is not in CISA KEV; EPSS is low (0.75%), consistent with a niche, agent-invoked attack surface rather than mass exploitation.
Code execution in n8n's Git node (all 1.x releases before 1.123.69, all 2.x releases before 2.33.4 and 2.34.1) allows an authenticated attacker who can also plant files on the n8n host to run arbitrary OS commands as the n8n process user. The Git node passes repository-local git configuration values directly to execution without neutralization, satisfying CWE-78 (OS Command Injection); triggering any Git node operation against a repository whose config has been poisoned fires the injected command automatically. No public exploit has been identified at time of analysis, but the high impact triad (VC:H/VI:H/VA:H) and confirmed patch availability make immediate upgrading the correct response.
Arbitrary file read and write in n8n's Snowflake node allows an authenticated low-privileged user to exfiltrate or overwrite files on the n8n host by injecting Snowflake client-side commands (PUT/GET) into the Execute Query input field, bypassing n8n's own file-access restrictions. Affected versions span n8n before 1.123.69, all 2.x builds before 2.33.4, and 2.34.x before 2.34.1, as confirmed by vendor advisory GHSA-r4j2-j3wm-q689. No public exploit code has been identified at time of analysis, but the CVSS 4.0 score of 8.7 and the low barrier to exploitation - requiring only n8n credentials plus access to a Snowflake connection - make this a high-priority remediation.
Unauthenticated SPL injection in Splunk Enterprise's nearby-event search feature allows remote attackers to execute arbitrary Search Processing Language queries without authorization across versions 9.4.x, 10.0.x, 10.2.x, and 10.4.x. The root cause is a two-pronged failure: Splunk Web does not consistently escape caller-supplied values when constructing SPL for nearby-event searches, and the embedded report access endpoint accepts those crafted requests without performing the expected authorization check. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the unauthenticated network vector and wide enterprise deployment of Splunk make this a priority patch.
OS command injection in the TP-Link Archer C20 v6 web management interface enables an authenticated administrator to execute arbitrary system commands by submitting crafted WAN configuration inputs that bypass insufficient input validation. Full device compromise - confidentiality, integrity, and availability - is achievable for all traffic routed through the affected device. TP-Link has released a patched firmware; no public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in Termix (self-hosted web SSH/tunneling platform) before 2.3.2 lets an authenticated user who can edit a tunnel's host fields achieve arbitrary command execution. Attacker-controlled values (endpointPort, sourcePort, endpointUsername, endpointIP) are interpolated into single-quoted pkill -f patterns in src/backend/ssh/tunnel.ts, so a single quote breaks out of the pattern and appends a shell command that runs when DELETE /ssh/tunnel/disconnect/:tunnelName tears the tunnel down. Commands execute on the source SSH host with the privileges of the connected SSH account. No public exploit identified at time of analysis; fixed in 2.3.2.
Remote command injection in Termix, a web-based SSH server management platform, allows any authenticated user with file-manager access to execute arbitrary commands on a managed SSH host prior to version 2.3.2. The archive creation endpoint in src/backend/ssh/file-manager.ts passes user-supplied file basenames directly to GNU tar without an end-of-options delimiter, enabling an attacker to supply filenames matching tar checkpoint options (e.g., --checkpoint=1, --checkpoint-action=exec=<cmd>) that tar interprets as directives rather than operands. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, but the exploitation technique is well-documented and the CVSS score of 8.8 reflects genuine high-priority risk for all pre-2.3.2 deployments.
OS command injection in Dell Cloud Disaster Recovery (versions 20.2 and prior) lets an already high-privileged, remote user smuggle special shell characters into a command the product executes on the underlying host, resulting in arbitrary command execution. Dell rates it CVSS 9.1 with a scope change, meaning the injected commands can escape the application's authorization boundary onto the host OS. No public exploit identified at time of analysis and the flaw is not on CISA KEV, so severity is driven by impact rather than confirmed activity.
Arbitrary CI command execution in GitLab Enterprise Edition allows an authenticated developer-role user to run unauthorized commands within a CI pipeline context across all EE versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1. The root cause is CWE-829 (Inclusion of Functionality from Untrusted Control Sphere): a Claude AI agent integration within GitLab EE processes CI pipeline configuration drawn from a user-controlled source without adequate isolation, enabling instruction injection into the agent's execution context. A public proof-of-concept is confirmed via HackerOne report 3863650, though SSVC and EPSS signals indicate no observed widespread active exploitation at time of analysis.
Remote command injection in Ubiquiti's UniFi Talk Application lets a network-positioned attacker run arbitrary commands on the underlying host device due to improper input validation (CWE-20). Ubiquiti rates it CVSS 10.0 with a changed scope, meaning a successful attack escapes the application boundary to fully compromise the host. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in the Ubiquiti UniFi Enterprise Audio/Video Bridge allows a network-adjacent attacker to run arbitrary operating-system commands on the device by supplying maliciously crafted input that the firmware fails to validate. The CVSS 3.1 base score is 9.8 and the vector marks the flaw as network-reachable with no authentication or user interaction, yielding full confidentiality, integrity, and availability compromise. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Command injection in Ubiquiti's UniFi Protect Application lets a network-adjacent attacker holding only low-privileged credentials run arbitrary OS commands on the underlying host device. The CVSS 3.1 base score is 9.9 with a scope change, reflecting that a foothold in the application escalates into full control of the host operating system. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but the near-maximal score and low exploitation barrier make it a high-priority patch.
Command injection in Ubiquiti's UniFi Access Application allows a low-privileged attacker with network access to run arbitrary operating-system commands on the underlying host device. The flaw stems from improper input validation (CWE-20) and carries a critical CVSS 9.9 with a scope change, meaning application-level compromise pivots to full control of the host. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.
OS command injection in Ubiquiti's UniFi Access Application allows a low-privileged attacker with network reach to run arbitrary commands on the underlying host. Because the CVSS scope is marked Changed with full High confidentiality, integrity, and availability impact, successful exploitation moves beyond the application into the host device itself. No public exploit has been identified at time of analysis and the flaw is not on CISA KEV, but the 9.9 severity and low attack complexity make it a top-priority patch.
Command injection in Ubiquiti's UniFi Access Application allows an authenticated attacker with low privileges and network access to execute arbitrary OS commands on the host device. Rated CVSS 9.9 with a scope change, the flaw stems from improper input validation and lets a low-privileged user break out of the application to compromise the underlying host. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti's UID Enterprise Agent lets a high-privileged, network-adjacent actor run arbitrary OS commands on the host device by supplying improperly validated input. The flaw carries a CVSS 9.1 rating driven by a scope change and full compromise of confidentiality, integrity, and availability, though exploitation requires existing high privileges (PR:H). No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti UniFi OS Server allows an attacker holding high-privilege access and network reachability to execute arbitrary operating-system commands on the underlying host, per Ubiquiti Security Advisory Bulletin 067. The flaw stems from improper input validation (CWE-20) and, with a scope-changed CVSS 9.1, lets a compromised or malicious privileged account break out of the application context to fully control the host. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti UniFi OS Server allows an attacker holding high-privilege (administrative) access on the network-reachable management interface to break out of the application and run arbitrary operating-system commands on the underlying host device. The flaw stems from improper input validation (CWE-20) and carries a vendor-assigned CVSS of 9.1, driven largely by a scope change from application to host. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the only source is Ubiquiti's own Security Advisory Bulletin 067.
Command injection in Ubiquiti UniFi Protect Application lets a network-positioned, unauthenticated attacker run arbitrary OS commands on the underlying host device, per the CVSS:3.1/AV:N/PR:N/UI:N vector and CWE-20 improper input validation root cause. The maximal 10.0 score reflects full confidentiality, integrity, and availability compromise with a scope change (S:C), meaning code executes on the host beyond the application boundary. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but the trivial complexity and lack of authentication make it a top-priority patch for any exposed NVR.
Authenticated command injection in Ubiquiti's UniFi Network Application (the controller software managing UniFi network gear) allows an attacker holding high-privilege access on the network to inject and execute operating-system commands on an adopted device managed by the controller. Because the injected command runs on a downstream device rather than the controller itself, the flaw crosses a trust boundary (CVSS scope change) and yields full confidentiality, integrity, and availability impact on the target device. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Command injection in TeamViewer Full Client and Host for Linux (prior to version 15.81.5) allows remote attackers to execute arbitrary OS commands as the current user by sending a crafted URL through the out-of-session chat feature. The attack exploits CWE-78 (OS Command Injection) in the Linux URL-handling path and requires only that the victim click the malicious link - no attacker authentication is needed. No public exploit has been identified at time of analysis; the vendor has released a patch in version 15.81.5 per advisory TV-2026-1009.
Command injection in Ubiquiti's UniFi Protect Application lets a low-privileged, network-adjacent user run arbitrary operating-system commands on the host device (typically a UniFi NVR, Cloud Key, or Dream Machine running the Protect service). The CVSS 3.1 score of 9.9 reflects a scope change: an attacker who already holds a low-privilege application account escapes the application boundary to gain full control of the underlying host. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Command injection in LibreNMS's Virtualization Discovery module enables authenticated administrator-level users to execute arbitrary OS commands on the underlying host server. Covering all tracked versions per CPE cpe:2.3:a:librenms:librenms:*, this CWE-78 flaw was disclosed by PRJBLK alongside a publicly available proof-of-concept exploit targeting version 26.5.0. No CISA KEV listing was identified at time of analysis, but the public PoC materially lowers the exploitation bar for any attacker who already holds admin credentials.
OS command injection in ClipBucket V5's web installer (versions 5.5.1 through 5.5.3-#153) lets unauthenticated remote attackers run arbitrary shell commands as the web server user by supplying a crafted php_cli_filepath value in a POST request to the installer. The flaw stems from the installer passing this parameter unescaped into a shell command that invokes the PHP CLI. A vendor patch exists (commit 36e7c6c), it was reported by VulnCheck, and no public exploit has been identified at time of analysis.
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating system commands through the application's status and logs plugin command interfaces. The CVSS 7.8 score reflects high impact across confidentiality, integrity, and availability with low attack complexity and no user interaction required. No public exploit identified at time of analysis, and no CISA KEV listing observed, but the fully unscopeed local impact makes this a meaningful risk on multi-tenant or shared Linux systems running NemoClaw.
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to execute arbitrary operating system commands with the privileges of the targeted process. All versions of NemoClaw are indicated as affected per NVD CPE data (wildcard version range). Successful exploitation can result in full code execution, persistent data tampering, sensitive information disclosure, and denial of service on the host. No public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to execute arbitrary operating system commands, leading to full compromise of confidentiality, integrity, and availability. All versions of NemoClaw appear affected per the CPE wildcard (*), and the vulnerability is rooted in improper neutralization of user-supplied input passed to shell commands (CWE-78). No public exploit code and no CISA KEV listing have been identified at time of analysis, limiting current real-world risk primarily to environments with untrusted local users.
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privileged access to execute arbitrary operating system commands. Exploitation yields full confidentiality, integrity, and availability compromise on the affected host, with potential for privilege escalation beyond the invoking user. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, but the low attack complexity (AC:L) and minimal privilege requirement (PR:L) lower the practical bar for exploitation once local access is obtained.
OS command injection in NVIDIA OpenShell across all supported platforms allows a network-accessible malicious gateway to execute arbitrary operating system commands on a victim host when a user interacts with that gateway. The CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R) reflects that an attacker requires no privileges on the victim system but does require the victim to interact with a malicious or attacker-controlled gateway endpoint. Successful exploitation yields full code execution, data tampering, and information disclosure - with no public exploit or CISA KEV listing identified at time of analysis.
Blind SSRF in Chainlit's MCP endpoint allows unauthenticated remote attackers to force the server to issue outbound HTTP requests to arbitrary internal or external URLs - including cloud metadata endpoints (e.g., AWS IMDSv1 at 169.254.169.254) - with fully attacker-controlled HTTP headers including Authorization and Cookie. Affected versions span 2.4.0rc0 through 2.11.x; the amplified form with attacker-controlled header forwarding affects 2.6.4 through 2.11.x, enabling state-changing authenticated requests against internal APIs without requiring any response read-back. Publicly available exploit code exists, confirmed against Chainlit 2.11.0 by SPL Security researchers; no CISA KEV listing is present at time of analysis.
Unauthenticated remote code execution in Chainlit (2.4.0rc0 through 2.11.x) occurs when features.mcp.enabled is set to true, exposing the POST /mcp endpoint that accepts a user-controlled stdio command string. Because the allowlist only validates the executable name and passes arguments unchecked, an attacker can supply 'npx -y -c <payload>' to run arbitrary shell commands as the Chainlit process. Publicly available exploit code exists (working PoC from the reporting researchers and in the advisory); it is not listed in CISA KEV, and MCP has been disabled by default since v2.7.0, limiting the exposed population.
Arbitrary code execution in Adobe Campaign Classic (ACC) arises from OS command injection (CWE-78), letting an attacker run arbitrary commands in the context of the running user. The flaw is rated CVSS 10.0 with a network attack vector, no privileges, no user interaction, and a scope change reaching the underlying host. No public exploit identified at time of analysis, but the maximal score and unauthenticated network reach make it a top-tier patching priority.
OS command injection in Adobe Campaign Classic (ACC) allows an attacker to execute arbitrary operating-system commands, achieving code execution in the context of the current user with a scope change that extends impact beyond the vulnerable component. Adobe (the reporting vendor) rates this maximum severity CVSS 10.0 (CWE-78), and exploitation requires no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is a vendor-disclosed, not-yet-actively-exploited critical flaw.
Arbitrary code execution in Emacs TRAMP affects Red Hat Enterprise Linux 6 through 10 via a local command injection flaw in the TRAMP remote file access subsystem. TRAMP concatenates user-influenced login arguments - including filenames - without sanitization before passing them to a local shell, enabling a low-privileged local attacker to inject shell commands that execute with the victim process's privileges. No public exploit code or CISA KEV listing is identified at time of analysis, but the low attack complexity and no-user-interaction requirement make this a credible local privilege escalation vector on multi-user RHEL systems.
Code injection in NVIDIA Unified Fabric Manager Enterprise's plugin management API allows low-privileged, adjacent-network authenticated users to execute arbitrary commands on the UFM host by submitting a specially crafted API request. All current release tracks - GA, LTS 2023, LTS 2024, and LTS 2025 - are confirmed affected per vendor-supplied CPE data. Successful exploitation yields code execution, privilege escalation, and information disclosure on a platform that controls InfiniBand fabric infrastructure, amplifying downstream impact on managed HPC and AI compute clusters. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unrestricted OS command execution in mcp-shell prior to v0.6.0 allows any LLM connected via stdio to invoke the shell_exec tool with arbitrary command strings, running them as the mcp-shell process user with no filtering, allowlisting, or logging. The root cause is that config.go initializes SecurityConfig.Enabled to false and SecurityValidator.validateCommand unconditionally short-circuits when that flag is false, bypassing all CWE-78-class protections. Both the from-source installation path and the MCP client configuration example in the README omit MCP_SHELL_SEC_CONFIG_FILE, making every operator who follows the documented instructions unknowingly vulnerable. No CISA KEV listing or independent public exploit repository has been identified at time of analysis; a vendor-confirmed fix is available in v0.6.0.
Arbitrary OS command execution in mcp-shell's default Docker image allows any MCP tool caller to bypass the secure-mode executable allowlist by supplying `/bin/bash -c <payload>` to the `shell_exec` tool, running commands as `mcpuser` (UID 1000) inside the container. The validator in `security.go` extracts only the first whitespace-delimited token as the executable, approves `/bin/bash` against the default allowlist, and passes the `-c` flag through the metacharacter check unchallenged because the default `blocked_patterns` array is empty. A fully working PoC is included in the GitHub Security Advisory GHSA-3x77-wg38-92r3; no public exploit identified at time of analysis beyond the researcher-provided PoC, and no CISA KEV listing exists. Vendor-released patch v0.6.0 is confirmed.
OS command injection in mcp-shell's 'secure mode' allows any MCP client to execute arbitrary shell commands by exploiting Git's runtime alias mechanism. The security validator in security.go blocks common shell metacharacters but omits '!', the prefix Git uses to invoke shell aliases via '-c alias.NAME=!CMD'. Because /usr/bin/git is in the default allowed_executables list and the CVSS PR:N vector confirms no authentication is required, all default Docker deployments (mcpuser, UID 1000, Git pre-installed) are exploitable by any entity with MCP connectivity. A fully functional PoC is published in the GHSA advisory; no CISA KEV listing is present at time of analysis.
Remote code execution in Weidmueller IE-SR-2TX-WL industrial security routers allows an unauthenticated network attacker to run arbitrary OS commands as root via the web management interface. The modified uhttpd server passes the HTTP Basic Authentication username directly into a shell command, so a crafted username containing shell metacharacters yields full device compromise. No public exploit identified at time of analysis, but the flaw is trivially exploitable and carries a CVSS 4.0 base score of 9.3 (Critical).
Stored OS command injection in the TP-Link Archer BE3600 V1 parent-control module allows an authenticated administrative attacker on the adjacent network to achieve arbitrary command execution on the device. The payload is persisted at configuration time-embedded in a crafted profile name-and fires asynchronously when the router's daily cloud report generation job runs, without any further attacker interaction. A vendor-released patch is available from TP-Link; no public exploit has been identified at time of analysis.
Root-level command injection in the TP-Link Archer BE800 V1 router (firmware prior to 1.4.2 Build 260708) allows an authenticated administrator on an adjacent network to execute arbitrary OS commands with root privileges by injecting shell metacharacters through the VPN connection interface. Successful exploitation hands an attacker full control of the embedded Linux environment, enabling persistent backdoors, credential theft, and use of the router as a pivot into the connected LAN. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released firmware patch is available.
Unauthenticated OS command injection in TP-Link Archer BE800 V1, BE3600 V1, and AX75 V1 routers allows any LAN-adjacent attacker to execute arbitrary commands with root privileges via the parental control subsystem. Exploitation requires no credentials and no user interaction, resulting in complete device compromise including full control over routing, firewall policy, and all traffic transiting the device. Vendor-released firmware patches are available for all three affected models; no public exploit code or CISA KEV listing has been identified at time of analysis.
Command injection in DrayTek VigorSwitch's setDevNet function allows authenticated remote attackers to execute arbitrary OS commands with root privileges by supplying crafted username or password values. At least ten VigorSwitch models are confirmed affected via CPE data, with the full tag list extending coverage to approximately 28 model variants. No public exploit code or CISA KEV listing has been identified at time of analysis, but the vulnerability class (CWE-78) and the root-level impact make it high priority for any DrayTek VigorSwitch deployment where administrative credentials may be compromised or shared.
Command injection in DrayTek VigorSwitch's tftp_upgrade function enables authenticated remote administrators to execute arbitrary OS commands with root privileges. At least 28 VigorSwitch models across DrayTek's managed switch lineup are affected, spanning both Gigabit and PoE/fiber variants. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the CVSS 4.0 score of 8.6 reflects high impact across confidentiality, integrity, and availability once administrative access is leveraged.
Command injection in DrayTek VigorSwitch's setTime function enables authenticated administrators to execute arbitrary OS commands with root privileges across at least ten confirmed models, with tags suggesting up to 28 additional affected variants. The flaw stems from insufficient input sanitization of username and password fields before shell execution, a classic CWE-78 pattern. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation is gated behind valid administrative credentials, per the CVSS PR:H rating and vendor description.
Command injection in multiple DrayTek VigorSwitch models enables authenticated administrators to execute arbitrary OS commands with root privileges through the setDevProto function's unsanitized username and password fields. At least 10 CPE-confirmed models are affected, with vendor tags suggesting a broader footprint of approximately 28 VigorSwitch variants. No public exploit code or CISA KEV listing has been identified at time of analysis; however, DrayTek published a security advisory in August 2026 acknowledging the vulnerability and the authentication prerequisite of valid admin credentials is the primary constraint on real-world exploitation.
Command injection in DrayTek VigorSwitch firmware's fdftDevice function allows an authenticated remote administrator to execute arbitrary OS commands with root privileges by supplying crafted input in the username or password fields of the web management interface. Approximately 28 VigorSwitch models across the G, P, Q, and PQ series are affected, confirmed by both VulnCheck reporting and a DrayTek vendor advisory published August 2026. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Command injection in DrayTek VigorSwitch's rebDevice function allows authenticated remote attackers with valid administrative credentials to execute arbitrary OS commands with root privileges by submitting crafted username or password values through the web management interface. At least 10 VigorSwitch models are confirmed affected per CPE data, with tags suggesting coverage across roughly 28 distinct models spanning the G, P, Q, PQ, and FX product lines. No public exploit or CISA KEV listing has been identified at time of analysis, though the advisory originates from a VulnCheck disclosure coordinated with a DrayTek security bulletin dated August 2026.
Command injection via the setDevice function affects multiple DrayTek VigorSwitch managed switch models, allowing an authenticated remote administrator to execute arbitrary OS commands with root privileges by supplying unsanitized input in the username, password, or location fields. The breadth of affected hardware - at least 28 distinct VigorSwitch SKUs spanning G, P, PQ, Q, and FX series - substantially widens the organizational exposure surface. No public exploit code or CISA KEV listing has been identified at time of analysis, but the network-accessible management interface and high-impact outcome make this a meaningful post-compromise escalation path.
Command injection in multiple DrayTek VigorSwitch models' getDetail function enables authenticated remote attackers holding valid administrative credentials to execute arbitrary OS commands with root privileges. The flaw (CWE-78) arises from the web management interface failing to sanitize username and password fields before incorporating them into system command execution. DrayTek published a security advisory in August 2026 covering a broad range of VigorSwitch models; no public exploit code or CISA KEV listing has been identified at time of analysis.
Command injection in DrayTek VigorSwitch's getVid function allows an authenticated remote administrator to execute arbitrary OS commands with root privileges by supplying crafted values in the username or password fields of the web management interface. At least 28 VigorSwitch models across the G, P, Q, PQ, and FX series are confirmed affected by the DrayTek August 2026 security advisory and VulnCheck reporting. No public exploit code has been identified at time of analysis, but the breadth of affected models and full root-level impact make this a patch-priority item for any organization operating DrayTek managed switching infrastructure.
Command injection in DrayTek VigorSwitch managed switches allows an authenticated remote attacker holding administrative credentials to execute arbitrary OS commands with root privileges by supplying crafted input to the auth_set function via the web management interface. At least 28 distinct VigorSwitch model lines are affected across DrayTek's G, P, PQ, Q, and FX series, with the vulnerability reported by VulnCheck and acknowledged via a DrayTek security advisory in August 2026. No public exploit code has been identified and the vulnerability is not listed in CISA's KEV catalog at time of analysis; the CVSS 4.0 score of 8.6 with PR:H accurately reflects that valid administrative credentials are a prerequisite, materially limiting opportunistic mass exploitation.
Pre-authentication OS command injection in DrayTek VigorSwitch managed switches lets a remote, unauthenticated attacker run arbitrary commands as root by supplying crafted input to the setget.cgi 'pass' field, which is passed to a shell without sufficient filtering. The flaw affects a broad range of VigorSwitch models (G/P/Q-series including G2540Xs, P2282X, Q2300X, G2542X and ~30 listed variants) and carries a CVSS 4.0 score of 9.3. No public exploit has been identified at time of analysis, but DrayTek has published a security advisory addressing it.
Command injection in multiple DrayTek VigorSwitch managed switch models allows an authenticated remote administrator to execute arbitrary OS commands with root privileges via the web management interface. The flaw resides in the sysreboot function, which fails to sanitize the config, act, pathN, and valueN parameters before passing them to OS command execution, per CWE-78. No public exploit or CISA KEV listing exists at time of analysis, but the VulnCheck and DrayTek advisories confirm the vulnerability across at least 28 VigorSwitch SKUs.
Command injection in the DrayTek VigorSwitch `webBackupAction` function allows authenticated remote attackers to execute arbitrary OS commands with root privileges across more than 25 managed switch models. Insufficient input sanitization of the `option`, `key`, `pw_encode`, `pathN`, and `valueN` parameters enables shell metacharacter injection, resulting in full device compromise. No public exploit has been identified at time of analysis; the administrative credential prerequisite is the primary barrier against opportunistic exploitation.
Command injection in the DrayTek VigorSwitch series' pingtrace diagnostic function allows an authenticated administrator to execute arbitrary OS commands with root privileges by submitting a crafted host field value. Twenty-eight distinct VigorSwitch models across the G, P, Q, PQ, FX, and PX series are affected, with patched firmware releases varying by model family (2.9.10, 2.10.6, 2.10.7, and 3.10.6). No public exploit has been identified at time of analysis and CISA has not listed this in KEV; exploitation is constrained by the mandatory administrative credential requirement confirmed by the CVSS PR:H metric.
Command injection via the commandTable function affects 28 DrayTek VigorSwitch managed switch models across multiple firmware branches, allowing an authenticated administrator to execute arbitrary OS commands with root privileges on the device. The root cause is incomplete sanitization of shell metacharacters - specifically backticks, newline characters, and single quotes - in a parameter field processed by the web management interface. Exploitation requires valid administrative credentials; patch available per DrayTek's August 2026 security advisory. No public exploit has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Command injection in DrayTek VigorSwitch's jsonstatus function allows authenticated remote administrators to execute arbitrary OS commands as root by submitting crafted values in the usescript, usefile, or option fields. At least 28 distinct VigorSwitch models across multiple firmware branches are confirmed affected per EUVD-2026-64974 and vendor advisory. Vendor-released patches are available; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Root-level OS command injection in DrayTek VigorAP wireless access points (models 903, 906, 912C, 918R, 960C, 1060C) lets a remote, unauthenticated attacker run arbitrary commands by sending a crafted UDP message to the dray_apm component after a START_SPEED_TEST request. The flaw stems from missing validation of UDP payload content before it is passed to command execution, and the CVSS 4.0 base score of 9.3 reflects full compromise of confidentiality, integrity, and availability. It was reported by VulnCheck, a vendor patch is available, and no public exploit has been identified at time of analysis.
Command injection in multiple DrayTek VigorAP access point models allows an authenticated remote attacker with administrative credentials to execute arbitrary OS commands as root via a crafted restorekey parameter in the upload_settings.cgi endpoint. Six VigorAP hardware models share the vulnerable codebase: 903, 906, 912C, 918R, 960C, and 1060C. Vendor firmware patches are available for all affected models; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Command injection in the apautotest function of multiple DrayTek VigorAP access point models allows a remote attacker holding valid administrative credentials to execute arbitrary OS commands with root privileges. Six CPE-confirmed models across the VigorAP 903, 906, 912C, 918R, 960C, and 1060C series are affected in all firmware versions below their respective patch thresholds. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches are available and should be applied promptly given the root-level impact.
Command injection in DrayTek VigorAP series access points (models 903, 906, 912C, 918R, 960C, and 1060C) allows an authenticated remote attacker to execute arbitrary OS commands with root privileges by submitting crafted input to the InquierTime function's time field via the web management interface. The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command) - the time parameter is passed to a system shell without adequate filtering, enabling shell metacharacter injection. No public exploit identified at time of analysis; a vendor-released patch is available across all affected model lines.
Command injection in DrayTek VigorAP mesh networking firmware allows authenticated remote administrators to execute arbitrary OS commands with root privileges across six VigorAP models. The vulnerability exists in the mesh_start_speed_test function, where unsanitized meshdevice_index and meshdevice_ip input is passed directly to shell command execution, yielding complete device compromise including full confidentiality, integrity, and availability impact. Vendor-released patches are available for all affected models; no public exploit code or CISA KEV listing has been identified at time of analysis.
Command injection in DrayTek VigorAP series wireless access points allows authenticated remote administrators to execute arbitrary OS commands with root privileges by submitting crafted input to the setcamset function via the web management interface. Six distinct VigorAP models are confirmed affected across multiple firmware branches, each with a separate patch target version released in August 2026. No public exploit identified at time of analysis, but the network-accessible attack vector and root-level impact make this a high priority for organizations with internet-exposed VigorAP management interfaces.
Command injection in multiple DrayTek VigorAP access point models allows a remote attacker holding valid administrative credentials to execute arbitrary OS commands as root by submitting malicious input to the setLan function's lanIp or lanNetmask parameters. Six models spanning several firmware lines are confirmed affected, with vendor patches now available for all of them per the August 2026 DrayTek security advisory. No public exploit code has been identified and the vulnerability is absent from the CISA KEV catalog, but the root-level code execution outcome warrants prompt firmware upgrade wherever management interfaces are network-reachable.
Command injection in DrayTek VigorAP series access points allows an authenticated remote attacker with administrative credentials to execute arbitrary OS commands as root via the ExportSettings function. Insufficient input sanitization of the backupkey, backuptype, and realtime parameters permits shell metacharacter injection before those values are passed to a system command. No public exploit or CISA KEV listing exists at time of analysis, but SSVC rates technical impact as total given root-level code execution on network infrastructure devices.
Command injection in multiple DrayTek VigorAP firmware models allows authenticated remote attackers with administrative credentials to execute arbitrary OS commands as root via the tr069TestInform function. Six models are confirmed affected - VigorAP 903, 906, 912C, 918R, 960C, and 1060C - with vendor-patched firmware available at model-specific versions. No public exploit code has been identified at time of analysis, but the straightforward nature of CWE-78 OS command injection against a root-privileged process means exploitation is trivial for any attacker who has obtained valid admin credentials.
Command injection in Black Duck blackduck-c-cpp before version 3.0.7 enables any actor with write access to a scanned build directory to execute arbitrary OS commands as the account running the scan. The scanner's package manager component traverses the build directory and incorporates discovered filesystem paths into shell command strings without quoting or escaping, making any file or directory whose name contains shell metacharacters an effective injection vector. No public exploit code or active exploitation is confirmed at time of analysis, but the mechanic is standard shell injection requiring no specialized tooling, making this a meaningful risk in shared CI/CD environments where untrusted parties can write to scanned directories.
OS command injection in Sakura Editor (Windows text editor) enables arbitrary command execution on a victim's PC when they open a file from an attacker-crafted directory and invoke the 'Open Terminal' (Open PowerShell) feature. The vulnerability, tracked as JVN#74538868 and GHSA-6x2x-729r-wjh5 and reported by JPCERT, requires social engineering to place the victim's file in a path containing injected shell metacharacters. No public exploit identified at time of analysis and no CISA KEV listing, but the full-compromise impact (C:H/I:H/A:H on the vulnerable system) warrants prompt patching to v2.4.3.
OS command injection in 4MOSAn GCB Doctor allows unauthenticated remote attackers to execute arbitrary system commands via a leftover ADOdb test page whose parameter is passed into a shell context. The vulnerable component is a debug/test artifact (an ADOdb connection test page) that was never removed from production builds, so any internet-reachable instance before build 20260621 is exploitable with a single crafted request. No public exploit has been identified at time of analysis, but the CVSS 4.0 base score of 9.3 and the fully unauthenticated network vector make this a high-priority patch.
Command injection in better-npm-audit through 3.11.0 (and the 4.0.0-rc.2 prerelease) allows arbitrary OS command execution when a value containing shell metacharacters is supplied to the --registry CLI flag. The vulnerability exists because handleInput.ts interpolates the raw registry value into a shell command string that is then passed to Node.js child_process.exec(), which spawns a system shell and interprets metacharacters such as semicolons, pipes, and backticks as command separators or substitutions. No confirmed active exploitation or CISA KEV listing exists at time of analysis, but the vulnerable code path is publicly documented in GitHub issue #119 and the diff of PR #120, significantly lowering the barrier to exploit development.
Command injection in UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 allows an attacker who controls /etc/passwd entries on a target system to execute arbitrary commands on a forensic analyst's host machine. The vulnerability targets the DFIR tool itself rather than the system under investigation: when an analyst runs UAC against a compromised host, crafted usernames or home directory paths containing shell metacharacters are substituted into command strings and passed to eval without sanitization in parse_artifact.sh. This creates a novel attacker-pivots-to-analyst scenario with no public exploit identified at time of analysis, but the attack chain is straightforward given /etc/passwd write access on the investigated system.
Command injection in UAC (Unix-like Artifacts Collector) versions before 3.3.0 allows an attacker who controls evidence under forensic analysis to execute arbitrary commands on the investigating analyst's own host system. The _command_collector function substitutes placeholders such as %user%, %user_home%, and %line% into shell command strings via sed without sanitizing shell metacharacters, then passes the result to eval - enabling malicious filenames or artifact definitions to inject and execute arbitrary shell code on the analyst's workstation. No CISA KEV listing or public exploit code has been identified at time of analysis; vendor patch is available in 3.3.0 per GitHub commit 2cc367d.
Command injection in UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 enables arbitrary command execution on a forensic analyst's workstation when processing evidence containing attacker-controlled data. The root cause is unsafe use of shell `eval` to expand untrusted placeholders - including `%user%`, `%user_home%`, `%line%`, and `%mount_point%` - in the `_run_command` function, allowing shell metacharacters or command substitutions embedded in usernames, filenames, or artifact definitions to execute in the analyst's shell context. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 3.3.0.
Remote command injection in Comfast CF-N1-S firmware 2.6.0.1 allows a low-privilege authenticated attacker to execute arbitrary OS commands via the NTP timezone configuration CGI endpoint by supplying unsanitized shell metacharacters in the `timestr` parameter. The CVSS 4.0 vector scores 8.6 with full high-impact ratings across confidentiality, integrity, and availability on both the vulnerable device and subsequent systems, reflecting potential for complete device takeover. A public proof-of-concept exploit is available on GitHub, materially lowering the skill threshold for exploitation with no confirmed patch at time of analysis.
Command injection in Cloud Foundry's BOSH CLI on Windows enables an adjacent-network attacker to execute arbitrary shell commands - specifically via PowerShell injection - without requiring authentication. The vulnerability affects all tracked versions of the BOSH CLI (cpe:2.3:a:cloud_foundry_foundation:bosh_cli) when deployed on Windows hosts, resulting in full confidentiality, integrity, and availability compromise of the affected system. No public exploit code or CISA KEV listing has been identified at time of analysis, but the high-impact CVSS vector (7.5) and the specificity of the PowerShell injection vector indicate meaningful risk for Cloud Foundry operators running BOSH on Windows.
OS command injection in Apache CloudStack's NAS backup provider plugin enables an authenticated operator account to execute arbitrary commands on KVM hypervisor hosts by supplying unsanitized shell metacharacters to the addBackupRepository or updateBackupRepository management APIs. Affected deployments span versions 4.20.0.0 through 4.22.1.0 when the NAS backup provider plugin is in use; exploitation is deferred and triggered when any downstream account performs a backup restore. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation status as 'none,' though technical impact is rated 'total' given hypervisor-level code execution.
Cross-tenant root command execution in Apache CloudStack (4.14.0.0-4.20.3.0 and 4.21.0.0-4.22.1.0) allows an authenticated tenant holding only the default User role to run arbitrary shell commands as root on the KVM hypervisor host, which also runs other tenants' VMs. The flaw stems from CloudStack fetching a user-supplied .metalink file during directDownload template registration and dispatching its inner URLs to the KVM agent without re-validating them against the scheme allowlist; a related SSRF variant lets the Secondary Storage VM retrieve internal targets and persist them as downloadable templates. No public exploit identified at time of analysis, and no CVSS is provided by the vendor.
Command injection in Apache CloudStack's diagnostics APIs allows Admin-role authenticated users to execute arbitrary commands as root on system VMs and Virtual Routers, constituting a full compromise of those instances across versions 4.20.0.0-4.20.3.0 and 4.21.0.0-4.22.1.0. The getDiagnosticsData and runDiagnostics API endpoints fail to properly neutralize special shell characters in user-supplied input before passing it to underlying diagnostic processes on the target VMs. No public exploit code or CISA KEV listing has been identified at time of analysis, but successful exploitation of a Virtual Router can expose all guest network traffic routed through that instance and provide a lateral movement foothold within the CloudStack-managed infrastructure.
OS command injection in the Datiphy Data Management Center API endpoint (versions v8.3.0 through v8.5.1) lets an authenticated administrator run arbitrary operating-system commands as root, escalating application-level admin rights into full host compromise. Rated CVSS 4.0 9.4 (Critical) and reported by ZUSO ART, the flaw yields high confidentiality, integrity, and availability impact on both the vulnerable and subsequent systems. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker run arbitrary operating-system commands due to improper neutralization of special elements (CWE-78). IBM PSIRT rates it CVSS 9.9 with a scope change, reflecting that an authenticated foothold can be escalated into full host compromise across the confidentiality, integrity, and availability dimensions. No public exploit identified at time of analysis and it is not listed in CISA KEV, so the current threat is potential rather than confirmed in-the-wild activity.
OS command injection in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 enables remote attackers holding low-privilege credentials to execute arbitrary OS commands on affected systems. The CWE-78 root cause - improper neutralization of shell-special characters before they reach an OS command - means a valid but unprivileged account is sufficient to achieve full confidentiality, integrity, and availability compromise. No public exploit code or active exploitation has been identified at time of analysis, though the SSVC framework rates the technical impact as total.
OS command injection in OTRS Community Edition's PGP encryption module allows authenticated administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options, which are concatenated unsanitized into a shell command invoked during normal ticket operations. Exploitation requires pre-existing administrator-level access to the OTRS admin panel and is triggered automatically once a malicious configuration is saved and a PGP-involving ticket operation occurs. No public exploit has been independently confirmed beyond a researcher disclosure blog, and the vulnerability is not listed in CISA KEV at time of analysis.
OS command injection in Laravel Backpack CRUD's Stats::makeCurlRequest method allows unauthenticated remote attackers to execute arbitrary OS commands as the web server user by supplying a crafted HTTP Host header. All four maintained branches are affected: 4.1.x before 4.1.72, 5.x before 5.6.2, 6.x before 6.8.13, and 7.x before 7.0.36. No public exploit code or CISA KEV listing exists at time of analysis, but the only in-code guard is a 1-in-100 probabilistic gate that provides no meaningful protection against a determined attacker who can retry requests.
Pre-authentication OS command injection in TP-Link Omada gateways (ER-series and DR-series VPN routers) lets an unauthenticated remote attacker execute arbitrary commands when the device is configured as an OpenVPN Server, because client-supplied data is insufficiently validated during OpenVPN connection establishment before authentication completes. Successful exploitation can yield full device compromise (CVSS 4.0 9.3, CWE-78). No public exploit has been identified at time of analysis, and the flaw was reported by the vendor (TP-Link) itself.
Command injection in the Sony XAV-9500ES car audio receiver firmware 3.02.00 allows a local attacker with low-privileged code execution to escalate to root via the device's crash dump handler. The handler passes user-controlled input directly to an OS system call without sanitization (CWE-78), enabling arbitrary command execution at the highest privilege level. Disclosed by ZDI as ZDI-26-477 (ZDI-CAN-29061); no public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Local privilege escalation in Kenwood DNR1007XR network video recorder devices allows a low-privileged local attacker to achieve root-level code execution by exploiting command injection in the JKGenService service. The flaw (CWE-78) exists because user-supplied input is passed without sanitization to a system call, enabling shell metacharacter injection. No public exploit has been identified at time of analysis, and the device is not listed in CISA KEV, but successful exploitation yields full system compromise on the affected hardware.
Remote code execution via OS command injection in NoMachine's web service allows authenticated remote attackers to execute arbitrary commands as the service account. The flaw, tracked by Zero Day Initiative as ZDI-CAN-30634 (ZDI-26-483), exists within the getstat command handler of the web service listening on TCP port 4000 by default, where user-supplied input is passed unsanitized to a system call. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in CISA KEV, though the CVSS score of 8.8 and full C/I/A impact make this a genuine remediation priority for any organization using NoMachine for remote access.
Arbitrary OS command execution via ODMDIR environment variable manipulation affects IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1, enabling local authenticated users to escalate privileges beyond their initial access boundary. The CVSS scope change (S:C) indicates that successful exploitation can compromise components outside the immediate process context - a critical concern for AIX systems hosting sensitive workloads. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but a vendor patch is available through IBM's support portal.
Privilege escalation in Ubuntu's accountsservice package allows a local low-privileged user to execute arbitrary shell commands as root (real UID 0) by injecting a GNU sed 'e' flag payload into their ~/.pam_environment LANGUAGE entry, which is then processed unsanitized by Ubuntu-specific helper scripts (save-to-pam-env, update-langlist) when the SetLanguage D-Bus method is invoked. All Ubuntu accountsservice packages before version 23.13.9-8ubuntu7 are affected; this is a Ubuntu-specific packaging defect, not an upstream accountsservice issue. No public exploit code or CISA KEV listing has been identified at time of analysis, though the attack path is well-described and technically straightforward.
Arbitrary OS command execution in Neo.mjs (versions prior to commit 88c77fc4) arises in the ai/mcp/server/file-system MCP server, whose FileSystemService.mjs passes a caller-supplied absolutePath into a shell via exec() inside checkSyntax() and runPlaywrightTest(). An attacker who can steer an AI agent into calling these MCP tools with a path containing shell metacharacters runs commands with the privileges of the MCP server process. No public exploit is identified at time of analysis and the flaw is not in CISA KEV; EPSS is low (0.75%), consistent with a niche, agent-invoked attack surface rather than mass exploitation.
Code execution in n8n's Git node (all 1.x releases before 1.123.69, all 2.x releases before 2.33.4 and 2.34.1) allows an authenticated attacker who can also plant files on the n8n host to run arbitrary OS commands as the n8n process user. The Git node passes repository-local git configuration values directly to execution without neutralization, satisfying CWE-78 (OS Command Injection); triggering any Git node operation against a repository whose config has been poisoned fires the injected command automatically. No public exploit has been identified at time of analysis, but the high impact triad (VC:H/VI:H/VA:H) and confirmed patch availability make immediate upgrading the correct response.
Arbitrary file read and write in n8n's Snowflake node allows an authenticated low-privileged user to exfiltrate or overwrite files on the n8n host by injecting Snowflake client-side commands (PUT/GET) into the Execute Query input field, bypassing n8n's own file-access restrictions. Affected versions span n8n before 1.123.69, all 2.x builds before 2.33.4, and 2.34.x before 2.34.1, as confirmed by vendor advisory GHSA-r4j2-j3wm-q689. No public exploit code has been identified at time of analysis, but the CVSS 4.0 score of 8.7 and the low barrier to exploitation - requiring only n8n credentials plus access to a Snowflake connection - make this a high-priority remediation.
Unauthenticated SPL injection in Splunk Enterprise's nearby-event search feature allows remote attackers to execute arbitrary Search Processing Language queries without authorization across versions 9.4.x, 10.0.x, 10.2.x, and 10.4.x. The root cause is a two-pronged failure: Splunk Web does not consistently escape caller-supplied values when constructing SPL for nearby-event searches, and the embedded report access endpoint accepts those crafted requests without performing the expected authorization check. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the unauthenticated network vector and wide enterprise deployment of Splunk make this a priority patch.
OS command injection in the TP-Link Archer C20 v6 web management interface enables an authenticated administrator to execute arbitrary system commands by submitting crafted WAN configuration inputs that bypass insufficient input validation. Full device compromise - confidentiality, integrity, and availability - is achievable for all traffic routed through the affected device. TP-Link has released a patched firmware; no public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in Termix (self-hosted web SSH/tunneling platform) before 2.3.2 lets an authenticated user who can edit a tunnel's host fields achieve arbitrary command execution. Attacker-controlled values (endpointPort, sourcePort, endpointUsername, endpointIP) are interpolated into single-quoted pkill -f patterns in src/backend/ssh/tunnel.ts, so a single quote breaks out of the pattern and appends a shell command that runs when DELETE /ssh/tunnel/disconnect/:tunnelName tears the tunnel down. Commands execute on the source SSH host with the privileges of the connected SSH account. No public exploit identified at time of analysis; fixed in 2.3.2.
Remote command injection in Termix, a web-based SSH server management platform, allows any authenticated user with file-manager access to execute arbitrary commands on a managed SSH host prior to version 2.3.2. The archive creation endpoint in src/backend/ssh/file-manager.ts passes user-supplied file basenames directly to GNU tar without an end-of-options delimiter, enabling an attacker to supply filenames matching tar checkpoint options (e.g., --checkpoint=1, --checkpoint-action=exec=<cmd>) that tar interprets as directives rather than operands. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, but the exploitation technique is well-documented and the CVSS score of 8.8 reflects genuine high-priority risk for all pre-2.3.2 deployments.