OS Command Injection

Untrusted git configuration includes reachable through simple-git before 4.0.0 let an attacker execute arbitrary commands with the privileges of the Node.js process. The default blockUnsafeOperationsPlugin failed to classify include.path inside customArgs passed to git.clone(), and the initial remediation also missed includeIf.<condition>.path, so a loaded config file could set an executable option such as core.sshCommand that Git runs during the clone. Exploitation is unauthenticated (CVSS:3.1/AV:N/AC:H/PR:N/UI:N, base 8.1) but requires both attacker-influenced customArgs reaching git.clone() and an attacker-controlled file already readable by the Node.js process; no public exploit was identified at time of analysis and the issue is fixed in simple-git 4.0.0.

Command injection in the IBM Guardium Data Protection 12.2 CLI certificate S/MIME recipient deletion routine allows an authenticated user holding a privileged CLI role to execute arbitrary shell commands with root privileges on the appliance. The flaw sits in a specific certificate/S/MIME management code path and requires high-privilege authentication plus interactive access to the command-line interface, so it is best characterized as an access-gated privilege escalation and post-compromise escalation primitive rather than a mass-exploitation threat. Patch status is "Patch available per vendor advisory" (IBM support page node/7288034); no public exploit identified at time of analysis, and no EPSS score was supplied with the intelligence feed.

Command injection in IBM Guardium Data Protection 12.2 allows an authenticated, highly privileged CLI user to execute arbitrary operating-system commands as root, escaping the restricted certificate-export shell (scope change) and fully compromising confidentiality, integrity, and availability. The flaw is CWE-78 (OS command injection) in the certificate export CLI path and carries a vendor CVSS 3.1 score of 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). Exploitation is gated behind privileged CLI authentication, and no public exploit code or confirmed active exploitation has been identified at time of analysis; IBM has released a vendor patch.

Command injection in IBM Guardium Data Protection 12.2 lets an authenticated attacker who can influence security policy alert text execute arbitrary operating system commands with root privileges through the SNMP alert notification functionality. Exploitation is gated behind valid credentials with policy-authoring capability and requires that the deployment actually uses SNMP alerting, so this is a privileged-insider or compromised-account risk rather than an opportunistic remote attack; no public exploit code was identified at time of analysis and CISA SSVC records no known exploitation. IBM has published a vendor patch, and the EPSS score is low (0.67%, ~50th percentile), consistent with a credible high-impact issue that is not an emergency.

Argument injection in Weblate's Mercurial backend lets an authenticated user with project-scoped component.edit permission plant a dash-prefixed repository filename that Mercurial later interprets as a command-line option instead of a literal path, resulting in arbitrary command execution with the privileges of the Weblate service account when the repository is next updated. The issue affects Weblate 4.11.1 through 2026.7.1 and is a residual, incomplete fix for CVE-2022-23915; although it carries a CVSS of 8.5, exploitation requires a Mercurial-backed RESX component using the 'Update RESX files' add-on plus a subsequent repository update, so the realistic attack surface is narrow. A vendor patch is available in Weblate 2026.8, and no public exploit identified at time of analysis.

Authenticated shell command injection in Apache DolphinScheduler (all versions before 3.4.3) lets a user with permission to create or upload resources execute arbitrary commands as the DolphinScheduler service account. An attacker names a resource using shell command-substitution syntax such as $(...), then passes the resulting path as the scriptPath parameter to the Alert Script plugin's /test-send endpoint; because that parameter is concatenated into a /bin/sh -c invocation without neutralization of shell metacharacters, the shell evaluates the injected command. Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8) confidentiality, integrity and availability impact are all High, and while valid credentials and access to the Alert Script test-send functionality are required, no victim interaction is needed; no public exploit code or confirmed active exploitation was identified at time of analysis.

OS command injection in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls a repository's contents to execute arbitrary commands with the privileges of the desktop application's diff viewer. The attacker supplies a crafted .gitattributes file that registers a clean/smudge filter plus a .git/config that binds that filter driver to an arbitrary shell command; when the victim opens that repository's workspace-changes diff view, the app's internal/gitcmd module runs git diff and the malicious filter is executed. Exploitation is strictly local (AV:L) and requires user interaction - the victim must open or view the attacker-supplied repository - and no public exploit code or confirmed active exploitation has been identified at time of analysis, so the risk is genuine but bounded rather than a mass-exploitable network flaw.

Command injection in the Node.js shell-quote library (formerly published as shell-quote on npm) allows an attacker who controls a string placed after a { comment } token to break out of the generated shell command and execute arbitrary shell input. The flaw affects the quote() function before version 1.11.0: a line terminator (\n, \r, U+2028 or U+2029) inside a later string terminates the '#' comment emitted for the comment token, causing the remainder of that string to be interpreted as shell syntax - for example quote(['echo','ok',{comment:'x'},'a\nid;#']) executes id under sh, bash, dash, ksh and zsh. It is also reachable through the quote(parse(untrustedCommand).concat(untrustedArg)) idiom, because parse() emits a mid-word comment token for inputs such as a URL fragment (http://example.com/#frag). This is a genuine command-injection flaw (CWE-78) in a foundational Node.js utility; the vendor CVSS 4.0 score of 9.2 reflects the potential for full shell execution, though our independent CVSS 3.1 assessment is AV:N/AC:H (the vulnerable calling pattern is a prerequisite and is not present in a bare default install). No public exploit was identified at time of analysis and the issue is not in CISA KEV; the upstream fix commit includes test cases that demonstrate the triggering payload shapes. Vendor-released patch: shell-quote 1.11.0.

OS command injection in Netcore NAP930 firmware 0.1.241010.141410 allows unauthenticated remote attackers to execute arbitrary commands on the device via the 'sid' parameter of the /www/cgi-bin/network_tools CGI. The vulnerability, tracked as CVE-2026-102240 (CVSS 4.0: 9.3; independent assessment CVSS 3.1: 9.8), has publicly available exploit code. The vendor was contacted but did not respond, and no fixed firmware is available.

Command injection in the Ziroom ZHOME A0101 smart home gateway (firmware 1.0.1.0) lets an authenticated, high-privileged remote attacker execute arbitrary shell commands on the device via the password1 parameter of the /api/ZRnetwork/set_passwd endpoint. The CVSS 4.0 vector scores 8.5 (AV:N/AC:L/AT:N/PR:H/UI:N, VC/VI/VA:H), and the high-privilege prerequisite (PR:H) is the key limiting factor, since an attacker must first hold elevated API access to reach the endpoint. Publicly available exploit code exists for this exact endpoint, raising the practical risk, and because the vendor did not respond to disclosure there is no vendor-released patch; no confirmed active exploitation (CISA KEV) has been observed.

Command injection in Ziroom ZHOME A0101 firmware 1.0.1.0 allows an authenticated attacker with high privileges to execute arbitrary shell commands on the device by supplying a crafted 'mac' value to the /api/ZRQos/set_online_client API endpoint. The flaw is network-reachable (CVSS 3.1 AV:N/AC:L) and carries full confidentiality, integrity, and availability impact on both the vulnerable device and downstream systems, though the PR:H rating means the attacker must first hold administrative access to the ZHOME management interface. Publicly available exploit code exists (a technical write-up is hosted on GitHub), but there is no indication of confirmed active exploitation, and the vendor has not released a fix.

Command injection in the Ziroom ZHOME A0101 smart-home gateway (firmware 1.0.1.0) lets an attacker who already holds an administrative session execute arbitrary shell commands via the 'ip' argument of the /api/ZRQos/set_online_client endpoint, delivering high impact to confidentiality, integrity, and availability. Publicly available exploit code exists, but exploitation is gated by the high privileges required (CVSS 4.0 PR:H) to reach the endpoint remotely over the network with no user interaction. The vendor was contacted early about the disclosure and did not respond, so no patched firmware has been identified at time of analysis.

OS command injection in the Ziroom ZHOME A0101 smart-home device (firmware 1.0.1.0) allows an attacker who can reach the device's HTTP management API to execute arbitrary shell commands on the device by passing crafted shell metacharacters in the login_pwd argument of the /api/ZRnetwork/firstSetup_wifi endpoint. The vendor CVSS 4.0 vector (8.5, AV:N/AC:L/AT:N/PR:H/UI:N, with High confidentiality, integrity and availability impact plus changed scope) indicates that per the scoring model high privileges are required, although the independent assessment notes that because this is a first-time-provisioning endpoint the real privilege barrier may be weaker in practice and should be verified. Publicly available exploit code exists (a GitHub proof-of-concept), exploitation requires no user interaction, and no vendor patch is available because Ziroom did not respond to the disclosure.

Remote command injection in the Ziroom ZHOME A0101 smart-home device (firmware 1.0.1.0) lets an attacker who can reach the /api/ZRnetwork/firstLogin HTTP endpoint inject shell metacharacters through the 'firstLogin' parameter and execute arbitrary operating-system commands with the privileges of the underlying service. Publicly available exploit code exists (a proof-of-concept write-up is published on GitHub and the issue was reported via VulDB), and the vendor was contacted early but never responded, so no vendor patch is available. Scored 8.5 (CVSS 4.0 base, E:P) and assessed as CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H by our analysis; exploitation requires the device to be network-reachable, typically on a LAN or an exposed management interface.

Command injection in the USB Device Management API (pop_usb_device) of the Ziroom ZHOME A0101 smart-home hub running firmware 1.0.1.0 lets a remote attacker who already holds administrator credentials execute arbitrary operating-system commands on the device by manipulating the 'path' argument. Publicly available exploit code exists (published with a write-up, and a PoC linked by VulDB), but there is no indication of confirmed active exploitation (not in CISA KEV). The practical exposure is gated by the need for a valid high-privilege admin session against the hub's LuCI web interface, which tempers the high CVSS 4.0 base score of 8.5.

PHP object injection in the ConvertPlus WordPress plugin (all versions through 3.6.3) allows any authenticated attacker at Subscriber level or above to reach the cp_display_preview_modal AJAX action, bypass its nonce guard simply by omitting the cp_admin_page_nonce parameter (the isset() check fails open and no capability check is performed), and inject a second attacker-controlled [smile_modal] shortcode via the style parameter that ultimately feeds attacker-supplied base64-decoded bytes into maybe_unserialize() with no allowed_classes restriction. The object-injection primitive is inert by itself - ConvertPlus ships no usable POP gadget chain - so real impact such as arbitrary file deletion, sensitive data disclosure, or code execution requires a separate installed plugin or theme that provides a compatible chain. No public exploit code or confirmed active exploitation was identified at time of analysis, and the assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8) reflects the low-privilege login requirement and the strong third-party gadget-chain dependency rather than automatic compromise.

Authenticated command injection in FreePBX prior to 17.0.9 allows a user who is authorized to access the GraphQL API module interface to execute arbitrary shell commands on the PBX host, running as the web/PBX service account (typically 'asterisk'). The flaw sits in the PBX API module's documentation generator, which accepts a caller-supplied 'host' parameter and interpolates it into a shell command; the code validates the generated OAuth access token before execution but never validates or escapes the host value. Exploitation requires a pre-existing, privileged account with API-module authorization (CVSS:4.0 PR:H, our assessment CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), which materially limits exposure; no public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor-released fix is version 17.0.9.

Authenticated command injection in the FreePBX User Control Panel (UCP) allows any account with UCP access - including low-privilege users who are frequently granted UCP but not Administrator Control Panel (ACP) rights - to run arbitrary commands on the PBX host as the web-server user (typically asterisk) via crafted HTTP requests. The flaw affects FreePBX versions prior to 16.0.39 and 17.0.7 and stems from insufficient sanitization of UCP URL parameters, which permits command chaining into host binaries; the vendor rates it CVSS 8.6 (CVSS:4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H) and the independent assessment concurs with high confidentiality and integrity impact over the network with low privileges required. No public exploit identified at time of analysis, and successful exploitation requires a valid UCP session plus network reachability to the PBX web interface, but no victim interaction.

Command injection in the FreePBX Music on Hold (MoH) module lets anyone holding an existing FreePBX administrator account run arbitrary system commands with the privileges of the Asterisk service, because a POST parameter that defines a custom Asterisk application is stored in the database unsanitized and later written verbatim into musiconhold_additional.conf, which Asterisk loads and executes. Deployments running FreePBX prior to 16.0.4 or 17.0.6 with the MoH module enabled and a functioning Asterisk backend are exposed; the vendor has patched the issue in 16.0.4 and 17.0.6. The required admin credentials (PR:L in the published CVSS 4.0 vector, PR:H in the independent CVSS 3.1 assessment) make this a post-authentication privilege-to-code-execution flaw rather than a pre-auth remote takeover, so realistic risk is confined to insider misuse, credential theft, or chaining from another auth bypass; no public exploit code and no confirmed active exploitation (CISA KEV) are identified in the available intelligence.

Unauthenticated OS command injection in the WatchGuard AP internal API service lets any host that can reach the access point's management-facing API execute arbitrary shell commands on the device's underlying operating system, yielding full compromise of confidentiality, integrity, and availability of the AP itself. Per the vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N), no credentials or user interaction are required, but exploitation is gated by network reachability - an attacker must be able to route to the internal API endpoint, which in practice points to the same network or management segment as the AP rather than arbitrary internet-wide exposure. No public exploit code has been identified and there is no CISA KEV entry at time of analysis, though the 9.3 severity and the absence of authentication make this a genuine high-priority issue where management-plane exposure exists; no EPSS score was included in the available data. A vendor PSIRT advisory is published at https://psirt.watchguard.com/CVE-2026-86102.

OS command injection in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands on the affected access point by supplying crafted input to a diagnostic parameter. The vulnerability carries a CVSS v4.0 base score of 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) and is independently assessed as CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; exploitation requires valid administrator credentials for the AP's CLI (PR:H), but once authenticated no user interaction and only low attack complexity are needed, yielding high confidentiality, integrity, and availability impact on the device itself. There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so realistic risk is concentrated where the AP management/CLI is network-reachable and administrative credentials are weak, reused, or exposed.

An unauthenticated OS command injection in the CGI handler of Netcore NR289-GE firmware 1.4.5102 lets remote attackers execute arbitrary shell commands on the router by supplying a crafted ntp_ip value to /set_ntp_server_ip.cgi. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VC/VI/VA:H) confirms no privileges or user interaction are needed, and the only real precondition is network reachability to the device's web management interface, so risk is highest where that interface is exposed to the WAN. Publicly available exploit code exists (linked from the VulDB disclosure and hosted on GitHub), but there is no CISA KEV entry, so active exploitation is not confirmed; the vendor was contacted and did not respond, and no vendor-released patch has been identified at time of analysis.

Remote unauthenticated OS command injection in Netcore NR289-GE firmware 1.4.5102 allows attackers to execute arbitrary commands on the router via the 'mac' parameter of the /location_time.cgi Location Time Handler. Publicly available exploit code exists, and the vendor did not respond to disclosure, so no patch is available at this time. The primary limiting factor is exposure: the web management interface is typically LAN-facing by default, so internet-wide exploitation depends on remote management being exposed to untrusted networks.

Local privilege escalation in Extegrity Exam4 on macOS lets any unprivileged local user escalate to full root by abusing command injection in the root-running com.extegrity.LogTool privileged helper, which is reachable over XPC. An attacker with a low-privileged local session (PR:L, AV:L, no user interaction required, UI:N) can send crafted XPC messages that reach [ConsoleLogHelper copyConsoleIntoFileFromStartDate:], where attacker-controlled parameters are passed into a syslog command without sanitization and executed with root privileges via LaunchSynchronous, yielding complete confidentiality, integrity, and availability impact (CVSS 3.1 base 7.8, HIGH). Exploitation requires the helper to be installed, registered, and reachable on the host; remote exploitation is not possible, and no public exploit code was identified at time of analysis.

Unauthenticated OS command injection in the Netcore NR289-GE router (firmware 1.4.5102) lets any remote attacker who can reach the device's /ap_ip.cgi CGI handler execute arbitrary shell commands on the underlying operating system, with CVSS v4.0 scored 9.3 and all three impact metrics (confidentiality, integrity, availability) rated High. No authentication or user interaction is required - stated by the CVSS vector PR:N/UI:N and confirmed by our independent assessment of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - so the only prerequisite is network reachability of the router's web service, which is LAN-bound by default but internet-facing whenever remote administration is enabled. Publicly available exploit code exists (a detailed proof-of-concept for the ap_ip command injection is published in a public GitHub repository), and the vendor was contacted but did not respond, so at the time of analysis there is no vendor fix and the practical exposure is limited only by how widely each deployment exposes the management interface.

Command injection in NooBaa's cluster_internal_api (set_hostname_internal function) allows an authenticated attacker holding NooBaa administrative privileges on a Red Hat OpenShift Data Foundation 4 Multi-Cloud Object Gateway to execute arbitrary shell commands in the context of the NooBaa process by supplying a hostname value containing shell metacharacters. The flaw carries a CVSS 3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), and the high-privilege prerequisite means it is not reachable by unauthenticated users; realized impact is bounded by the privileges of the NooBaa pod rather than guaranteed node-level root. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.

OS command injection in SUSE NeuVector 5.4 (before 5.4.11), 5.5 (before 5.5.4), and 5.6 (before 5.6.2) allows an attacker who already satisfies one of two prerequisites - an authenticated NeuVector user holding the namespaced Runtime Policies (write) permission, or possession of NeuVector's internal gRPC certificate key pair - to inject operating-system commands that execute inside the privileged enforcer container, resulting in complete compromise of the underlying worker node. The flaw is rated 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning remote reachability, low attack complexity, authenticated low privileges, and no user interaction, with total confidentiality, integrity, and availability impact once the prerequisite is met. Ordinary read-only users and unauthenticated network clients cannot trigger it, but any deployment that grants Runtime Policies write access broadly or leaks the internal gRPC key pair is at high risk; no public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, though weaponization would be straightforward given the trivially reachable command sink.

Authenticated PowerShell command injection in ManageEngine DDI Central (versions below 6201) allows a low-privileged user to achieve remote code execution by embedding malicious content in DNS SPF/TXT records that the product pushes to a managed Windows DNS server. The flaw is network-reachable and low-complexity (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), requiring only a valid low-privilege account and an active Windows DNS integration; no user interaction is needed once the poisoned record is pushed. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied in the source data.

Command injection in the Windows DNS Query Resolution Policy name field of ManageEngine DDI Central versions below 6201 enables an authenticated high-privilege administrator to run arbitrary operating-system commands, resulting in remote code execution on the DDI Central host. The CVSS 3.1 vector (7.2 HIGH, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) reflects a network-reachable, low-complexity attack that nonetheless requires privileged console access and the ability to create or edit a Windows DNS Query Resolution Policy, and no public exploit has been identified at time of analysis. The vulnerability is fixed in version 6201, so affected deployments that manage Windows DNS should be prioritized for upgrade, especially since a successful exploit yields full confidentiality, integrity, and availability impact on the compromised server.

Authenticated command injection in Apache Karaf's instance-management service lets a principal who can reach the instance:* shell commands (instance:create, instance:start, instance:restart, instance:change-opts) or the equivalent InstancesMBean JMX operations execute arbitrary OS commands as the Karaf process user, because the caller-supplied javaOpts value is concatenated into a launch string that is then handed to /bin/sh or cscript. Affected deployments are Apache Karaf instances before 4.4.12, and exploitation requires an authenticated principal (CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) with the ability to supply javaOpts; the risk is amplified by a fail-open default in which unconfigured command scopes are not role-restricted. EPSS is low (0.40%, ~32nd percentile), CISA SSVC records no known exploitation, and no public exploit code was identified at time of analysis, so this is a high-priority but not an emergency issue.

Authenticated command injection in BUFFALO WSR-300HP wireless routers and WEX-G300 range extenders lets a user who already holds administrative access to the device's web management interface execute arbitrary operating system commands by submitting a crafted HTTP request to a web form field. Successful exploitation yields full compromise of the device (confidentiality, integrity and availability all rated High), but the attack is gated behind valid admin credentials or an active admin session, which is the dominant risk-limiting factor, and the affected models are primarily Japanese consumer/SOHO devices. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; the vendor CVSS 4.0 score of 8.6 reflects impact severity once the prerequisite administrative access is met.

OS command injection in aaPanel BaoTa through 11.8.0 lets an authenticated panel operator execute arbitrary shell commands on the underlying host by supplying a crafted Password value to the archive-extraction routine. The defect sits in the function panelTask.bt_task._unzip within /www/server/panel/class/panelTask.py, and because the panel normally runs as root a successful injection yields full server compromise; a user-interaction step is required to invoke the unzip workflow. Publicly available exploit code exists (disclosed via a public gist referenced by VulDB), the vendor was contacted early but did not respond, and no vendor-released patch has been identified at time of analysis - this is the third near-identical command-injection flaw in the same release line alongside CVE-2026-101007 and CVE-2026-101008.

Command injection in the aaPanel (BaoTa) server management panel through version 11.8.0 lets an authenticated high-privilege panel user execute arbitrary operating-system commands by manipulating the split_file_path argument handled by merge_split_file in /www/server/panel/class/files.py. The flaw is network-reachable and requires no user interaction, but it demands an existing administrator-level session (PR:H), so realistic risk is concentrated on panels with untrusted account holders, exposed management interfaces protected by weak or default credentials, or environments where admin credentials have already been stolen. Publicly available exploit code exists, exploitation evidence is rated E:P, and the vendor was contacted early but did not respond, so no fix is currently available; this is a genuine but conditional risk rather than a pre-auth emergency.

OS command injection in aaPanel/BaoTa versions up to 11.8.0 allows an authenticated attacker with access to the administrative interface to execute arbitrary operating system commands on the underlying host by manipulating the Password argument during a database backup operation. The vulnerability requires user interaction to trigger the backup workflow, but because aaPanel typically runs with root privileges, successful exploitation leads to full host compromise. A public exploit has been disclosed and may be used, though there is no confirmed active exploitation (CISA KEV) at this time.

OS command injection in the Netcore NBR200V2 wireless router (firmware 1.3.241127.071246) lets an authenticated, low-privilege user execute arbitrary shell commands on the device by manipulating the 'url' argument passed to the Tools Ping Handler in /usr/bin/network_tools. Exploitation is network-reachable, requires no user interaction, and publicly available exploit code exists (a proof-of-concept write-up is hosted on GitHub), so any NBR200V2 whose management/diagnostics interface is reachable and whose credentials are known, guessable, or left at default should be considered at immediate risk. The vendor was contacted early but did not respond, and no fixed firmware has been identified, so no CISA KEV active-exploitation entry is associated with this issue at time of analysis. Successful exploitation yields full compromise of confidentiality, integrity, and availability on the device itself.

Unauthenticated OS command injection in the Netcore NBR200V2 router's Web Management Interface (firmware 1.3.241127.071246) allows remote attackers to execute arbitrary operating-system commands on the device by sending a crafted QUERY_STRING to /www/cgi-bin/network_tools, where the eval handler passes the attacker-controlled value into a shell command without sanitization. The CVSS 4.0 base score is 9.3 with full confidentiality, integrity and availability impact, and the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) confirms the attack is network-reachable with no authentication and no user interaction. Publicly available exploit code exists, including a published proof-of-concept write-up on GitHub, but there is no confirmed active exploitation in CISA KEV; the vendor was contacted early about the disclosure and did not respond, so no vendor patch is available.

OS command injection in the TOTOLINK N150RT SOHO router (firmware 3.4.0-B20201030) lets an attacker who can reach the Web Management Interface and has at least low-privilege credentials execute arbitrary operating-system commands on the device. The flaw is reachable through the /boafrm/formWlSiteSurvey handler, where the 'wlanif' argument is passed unsanitized into a shell command, giving full compromise of confidentiality, integrity and availability (CVSS 4.0 base 8.6; independent assessment maps this to CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Publicly available exploit code exists (a reference gist is tagged as an exploit), meaning the technique is already in circulation, but the issue is not confirmed actively exploited (no CISA KEV entry) and it is privilege-gated: the router web interface is normally LAN-facing, so WAN reachability depends on remote administration being enabled.

OS command injection in Fleet's generator for Fleet-maintained macOS app install and uninstall scripts allows crafted Homebrew cask metadata containing shell metacharacters such as $(...) to be carried unescaped into scripts that run as root on managed macOS hosts. Manifests generated before 2026-08-19 are affected; the flaw is a supply-chain vector because the attacker needs no Fleet credentials, only the ability to land crafted metadata in an upstream Homebrew cask that must then survive both upstream Homebrew cask review and Fleet's review of the automated ingestion pull request before a managed host installs or uninstalls the app. The vendor CVSS 4.0 base is 8.9, but the vendor's own vector is PR:H while CERT's independent assessment scores it CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, and the two independent review gates plus central, pre-built manifest distribution on 2026-08-19 sharply limit real-world exploitability; no public exploit code has been identified and there is no confirmed active exploitation (not in CISA KEV), so exploitation is assessed as difficult rather than imminent.

Command injection in navi through 2.24.0 allows an attacker who controls cheatsheet variable values - or file names inside a suggestion command directory - to have unescaped shell metacharacters substituted into commands that navi executes with the victim's privileges. Exploitation is local and condition-dependent: the crafted content must reach the victim (for example through a shared or poisoned cheatsheet repository) and the victim must interactively invoke the affected cheatsheet, after which arbitrary commands run at the user's own privilege level. No public exploit code was identified at time of analysis, and the flaw is not listed in CISA KEV, but the CVSS 4.0 score of 7.3 reflects high confidentiality, integrity, and availability impact on the victim's account once the conditions are met.

Command execution as the Liquidsoap process user is possible in AzuraCast through 0.23.x when an authenticated station user with Streamers and Profile permissions sets a streamer username containing shell metacharacters and a live recording session closes. The flaw (CWE-78, CVSS 8.7) requires the live-recording feature to be active and the malicious username to be passed unquoted into process.run during Liquidsoap config generation; there is no public exploit identified at time of analysis, and exploitation is limited to insiders or attackers who already hold streamer-level credentials on a station where recording is enabled.

OS command injection in MONAI's nnUNetV2Runner (monai.apps.nnunet.nnunetv2_runner) allows arbitrary command execution with the privileges of the user running an nnU-Net training or validation job, because values such as dataset_name_or_id from a YAML config - or from CLI/kwargs arguments - are concatenated into a command string and passed to subprocess with shell=True without quoting or validation. All MONAI releases before 1.6.0 are affected; exploitation is not network-facing and requires the victim to load an attacker-supplied configuration file and then launch a job such as train_single_model(), so the real-world risk is config-trust dependent rather than remotely triggerable. Publicly available exploit code exists (a Windows-verified proof of concept is included in the GHSA advisory), no authentication is required in the assessed vector (PR:N), and no confirmed active exploitation (CISA KEV) has been reported at time of analysis. Vendor-released patch: MONAI 1.6.0.

Authenticated PHP code injection in the lomart.fr UP Plugin for Joomla (versions 5.0.0-5.2.0 and 6.0.0-6.0.29) allows a high-privilege administrator to execute arbitrary PHP code and system commands on the underlying server. The flaw requires a valid Joomla administrator account (PR:H) and is remotely exploitable without user interaction, but no public exploit code or active exploitation has been identified at time of analysis. Because the plugin is a narrowly deployed third-party extension and no vendor patch is available, the real-world priority is low despite the critical CVSS score (9.4), with mitigation limited to removing the plugin or tightly restricting administrative access.

OS command execution on paired Chrome nodes is possible in OpenClaw 2026.5.1 through 2026.7.0 because the googlemeet.chrome node command accepts caller-supplied audio command arrays and runs them on the paired node without passing through the normal system.run exec-approval flow. An authenticated, tool-enabled agent (CVSS vector PR:L) that is permitted to invoke googlemeet.chrome - in a deployment where the Google Meet plugin is enabled, a Chrome node is paired, and googlemeet.chrome is on the allowed node commands list - can launch attacker-chosen processes on that node, with full confidentiality, integrity, and availability impact on the paired node (assessed CVSS 3.1 8.6; vendor CVSS 4.0 base 8.7). No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; the flaw is fixed in 2026.7.1, and removing googlemeet.chrome from allowed node commands or disabling the Google Meet plugin fully mitigates it.

Command injection in OpenClaw versions before 2026.8.1 lets an attacker who can supply command input to an agent turn slip hidden commands past the exec allowlist: escaped newlines desynchronize the allowlist parser, which validates only the visible portion of the input while the appended command executes without the expected authorization prompt. Successful exploitation yields full code execution on the host (VC:H/VI:H/VA:H, CVSS 4.0 base 8.6; independently assessed as CVSS 3.1 8.8 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), though it requires the operator to be actively driving the affected agent turn (UI:P) and the attacker to already hold a low-privilege position on the command-input surface (PR:L). No public exploit code has been identified at time of analysis and the flaw is not in CISA KEV, but the allowlist-bypass nature of the bug means any environment relying on the exec allowlist as its execution boundary should treat this as high priority.

OS command injection in the MediaWiki ExternalData extension before version 3.7 allows remote attackers to execute arbitrary operating-system commands on the wiki server. The flaw is reachable over the network with no authentication required per the CVSS vector (PR:N) and low attack complexity, and because the injected command runs in the web server's process context, the vendor's CVSS 4.0 score and our independent re-score both rate it at the maximum severity (10.0), extending impact to subsequent systems (S:C/C:H/I:H/A:H). Exploitation is conditional: the wiki must actually have ExternalData installed (it is an optional extension) and must have a program/command-executing external data source explicitly configured, and invocation may require page-edit rights on wikis that restrict editing; no public exploit code has been identified at time of analysis, but a vendor patch is available in ExternalData 3.7.

OS command injection in the PowerShell and Cmd wrapper classes of the CliInvoke.Specializations .NET library (and its predecessor package AlastairLundy.CliInvoke.Specializations) lets a double quote embedded in caller-controlled target paths or arguments break OS-level quoting of the single ProcessStartInfo.Arguments string, causing pwsh -Command or cmd /c to execute an additional command with the host process's privileges. Affected builds are CliInvoke.Specializations 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4, and 3.0.0-alpha.1 through alpha.4 plus 3.0.0-alpha.8 through alpha.10, as well as AlastairLundy.CliInvoke.Specializations 1.0.0-rc.1 through 1.6.1.1; an application is only reachable if it consumes one of these vulnerable versions, uses the specialized shell wrappers rather than direct process invocation, and routes attacker-influenced data into the target or arguments. Rated CVSS 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) by reporter GitHub_M; no public exploit identified at time of analysis and the issue is not listed in CISA KEV.

Authenticated command injection in IBM Guardium Data Protection 12.2 allows a user who can reach the GIM (Guardium Installation Manager) bundle import functionality to supply a crafted bundle whose contents cause attacker-controlled arguments to be passed to the underlying tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager. The flaw is network-reachable and requires only low-privileged authentication (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) with no victim user interaction, so any account able to trigger a bundle import should be considered capable of full compromise of the Central Manager. No public exploit code or confirmed active exploitation was identified at time of analysis; the vendor has published a fix advisory.

Command injection in Root Browser Classic 3.3.0 (Android, package com.jrummyapps.rootbrowser.classic) lets an attacker execute arbitrary shell commands with the app's privileges by supplying a SQLite database whose filename is seeded with shell metacharacters; the app passes that path to an operating-system shell without separating the filename from the command (CWE-78). Exploitation is local rather than remote: the crafted file must first reach the device (download, sideload, shared storage or another app) and the victim must then open it inside the app, so the flaw is gated by passive user interaction and confined to users of this root-capable file manager. No public exploit code was identified at time of analysis, and while exploitation yields high confidentiality, integrity and availability impact, the 8.5 CVSS v4.0 base score overstates the practical exposure because the realistic attack surface is narrow.

Command injection in the pairing process of eufy Omni C20 and Omni X10 Pro robot vacuums lets an unauthenticated attacker on an adjacent network or within wireless proximity run arbitrary system commands on the device during pairing. The vendor rates this CRITICAL at CVSS 4.0 9.0 (AV:A/AC:H/AT:P/PR:N/UI:N, all-high impact including subsequent-system impact), and CISA ICS published advisory ICSA-26-267-02; the practical bar is higher than the score suggests because the attacker must be radio/local-adjacent and catch the device inside an active pairing window. No public exploit code was identified at time of analysis, and the flaw is not confirmed actively exploited (not in CISA KEV).

Command injection in Termix 2.4.1 through 2.5.0 lets an authenticated administrator execute arbitrary operating-system commands as the Termix backend process by storing crafted domain and email values via PATCH /users/acme-ssl-settings and then triggering their interpolation into a certbot shell invocation through POST /users/acme-ssl-request. Successful exploitation exposes Termix databases, process secrets, stored credentials, and the backend's network reachability, with both HTTP-webroot and DNS-Cloudflare challenge modes affected. The issue is fixed in 2.5.1; no public exploit code has been identified at time of analysis, and the practical risk is bounded by the requirement for a high-privileged (administrator) account rather than being reachable pre-authentication.

Command injection in Dokploy before 0.29.13 lets an authenticated organization member with service:read permission execute arbitrary commands as root inside the Dokploy container by injecting shell metacharacters into the repoPath parameter of the patch.readRepoDirectories tRPC procedure. Because the standard deployment mounts /var/run/docker.sock, successful exploitation can pivot to control Docker and compromise the host and its managed applications; the vendor fix is available in 0.29.13, and no public exploit identified at time of analysis. The vulnerability is rated CVSS 9.9 with scope change and high confidentiality, integrity, and availability impact.

Authenticated command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote attacker with valid low-privileged credentials to execute arbitrary operating-system commands, potentially compromising confidentiality, integrity, and availability (CVSS 8.8). Exploitation requires network reachability to the DataStage/CP4D interface and the ability to supply input that is mapped into an unneutralized environment variable (CWE-78); no user interaction is needed. No public exploit code has been identified at time of analysis, and CISA's SSVC assessment rates exploitation as 'none' with total technical impact, so this is a genuine high-severity finding but not an emergency.

Command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker holding only a low-privilege account to execute arbitrary OS commands on the host, with high impact to confidentiality, integrity, and availability (CVSS 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation requires valid credentials and the ability to reach a code path that constructs an operating system command from user-supplied input without neutralizing shell special elements; no user interaction is needed, and the deployment context - an internal enterprise ETL service rather than an internet-facing endpoint - plus the narrow affected version materially constrain real-world exposure. No public exploit code has been identified and there is no confirmed active exploitation (not listed in CISA KEV); a vendor patch is available per IBM's advisory.

IBM DataStage on Cloud Pak for Data 5.4.0.0 fails to neutralize special elements that are passed into an OS command, allowing a remote attacker holding any low-privilege platform account to execute arbitrary operating-system commands on the DataStage host with the privileges of the vulnerable service. Rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N, high confidentiality, integrity and availability impact), the exposure is gated by authentication: there is no anonymous internet-facing path, but multi-tenant deployments, shared service accounts, or any compromised low-privileged credential are sufficient to reach full command execution. No public exploit code and no confirmed active exploitation were identified at time of analysis, while a vendor patch is available.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets a remote authenticated attacker with only low privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N) run arbitrary operating system commands on the affected platform, yielding high confidentiality, integrity, and availability impact for an overall CVSS base score of 8.8. Exploitation requires a valid CP4D session and access to the DataStage functionality that forwards attacker-controlled input into a shell command without sanitization; no public exploit identified at time of analysis, and IBM has published a vendor fix. Only the 5.4.0.0 build is explicitly named as affected, so patched builds referenced in IBM's advisory remove the exposure.

Command injection in rpm enables an attacker to run arbitrary shell commands as the invoking user when a victim installs, rebuilds, or otherwise processes a malicious source RPM (.src.rpm) that contains a %() macro construct in a source or spec file basename. The flaw is local and requires user interaction, with impact confined to the privileges of the user running rpm or rpmbuild, typically non-root; build farms and CI/CD pipelines that automatically handle untrusted SRPMs are the highest-risk targets. Red Hat CPEs list RHEL 6 through 10 and Red Hat Hardened Images, and no public exploit was identified in the provided intelligence; monitor the vendor advisory for exploitation and patch updates.

Local attackers can achieve arbitrary code execution by tricking a user or automation into processing a crafted manifest file with 'rpm -q -p', due to unexpected macro expansion of manifest entries in RPM before they are opened. This command injection flaw (CWE-78) affects Red Hat Enterprise Linux 6 through 10 and Red Hat Hardened Images, with a CVSS 3.1 base score of 7.8 (HIGH, AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H); exploitation requires user interaction but no privileges, and impact is limited to the privileges of the rpm process. No public exploit code or active exploitation has been identified at time of analysis.

Command injection in Brocade SANnav orchestrator versions before 3.0.1a enables network-adjacent attackers to execute arbitrary administrative Fibre Channel switch CLI commands and manipulate container runtimes, achieving high impact on confidentiality, integrity, and availability. The vendor CVSS 4.0 score is 8.6 (AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H); however, our independent assessment using CVSS 3.1 rates it 8.8 with PR:N (unauthenticated), and the description states unauthenticated while the vector indicates PR:L - authentication requirements are not confirmed from available data. No public exploit code has been identified at time of analysis, and there is no evidence of active exploitation (CISA KEV).

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker holding only a low-privilege account to execute arbitrary operating-system commands on the underlying host, fully compromising the confidentiality, integrity and availability of the affected deployment. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) confirms network reachability, low attack complexity, mandatory authentication at the low privilege level and no user interaction, matching the independent assessment that this is a genuine high-priority vulnerability rather than a high-CVSS-but-low-risk artifact. No public exploit code was identified at time of analysis, and a vendor patch is available through IBM support node 7288649; accordingly, real-world risk is concentrated in reachable, unpatched 5.4.0.0 deployments rather than in broad opportunistic exploitation.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote attacker with only low-privilege credentials run arbitrary commands on the underlying host, yielding full confidentiality, integrity, and availability impact. The flaw requires network reachability to the DataStage service but no user interaction and no non-default configuration, so any valid low-privilege account is sufficient to attempt exploitation; the platform is a specialized enterprise deployment typically placed behind organizational access controls rather than exposed to the internet. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (not in CISA KEV), but a vendor patch is available per IBM's advisory, and the low attack complexity and high impact make prompt patching advisable.

Remote authenticated code execution in IBM DataStage on Cloud Pak for Data 5.4.0.0 is possible because connector property values are not properly escaped when OSH scripts are generated, allowing an attacker with a valid account and the ability to define or edit connector properties to inject commands that execute with DataStage privileges. The flaw is network-reachable, low-complexity, and requires no victim interaction, but it requires authentication (CVSS 3.1 PR:L) and is rated 8.8 HIGH (C:H/I:H/A:H). No public exploit code or confirmed active exploitation was identified in the provided intelligence, and a vendor patch is available via IBM support.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an authenticated remote attacker holding low-privilege credentials to execute arbitrary commands on the underlying system, with high impact to confidentiality, integrity, and availability. The flaw stems from improper neutralization of special elements used in OS commands (CWE-78), and exploitation requires a valid authenticated session plus reachability of the specific DataStage feature that passes user-supplied input into a shell command; no user interaction is needed. No public exploit code has been identified and there is no evidence of active exploitation (not listed in CISA KEV), but a vendor patch is available and the issue should be treated as a genuine high-priority fix rather than a high-CVSS-but-low-risk artifact.

Unauthenticated remote code execution in IBM Concert 1.0.0 through 3.0.0 lets any attacker who can reach the service send specially crafted input that is incorporated into operating-system commands, executing arbitrary commands with the privileges of the Concert application. The vulnerability is rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no authentication, no user interaction, and no special conditions are required - only network reachability of an unpatched instance. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, so exploitation appears opportunistic-dependent rather than confirmed in the wild, but IBM has published a vendor fix, so the priority is to patch exposed instances before exploit code or scanning activity emerges.

Command injection in the Brocade SANnav CLI scripting component lets an authenticated user who already holds command-execution/scripting permissions break out of the restricted allow-list execution context and run unauthorized shell commands across managed fabric switches, escalating to full administrative switch access. Exploitation requires a valid SANnav account with scripting rights and adjacency to the SAN management plane (AV:A, PR:L) - the product is not internet-reachable by default - and no user interaction is needed once that foothold exists. Every SANnav release before 3.0.1a is in scope per the CPE (cpe:2.3:a:brocade:sannav:*:*:*:*:*:*:*:*), and no public exploit code has been identified at time of analysis; this is a genuine mid-to-high priority for SANnav operators, not an emergency-tier internet-facing issue.

OS command injection in Plesk allows any authenticated low-privilege panel account - customer, reseller, or subscription level - to run arbitrary operating-system commands with root privileges, turning what is normally a tightly scoped hosting login into full control of the managed server. The flaw is remotely reachable over the network at low complexity with no user interaction (CVSS 4.0 base 9.4; independently assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), and the scope change plus high confidentiality, integrity, and availability impact reflect a complete host compromise rather than a single-tenant breach. No public exploit code has been identified at time of analysis and the CVE is not listed as confirmed actively exploited (CISA KEV), but the low bar of a single valid non-admin session keeps the practical risk high; the specific vulnerable panel function and the exact affected Plesk versions are not stated in the available data and must be confirmed against the vendor advisory.

Authenticated OS command injection in OpenC3 COSMOS 5.12.0 through 7.2.1 allows a user with a valid session to run arbitrary operating-system commands as the openc3 service user by writing shell metacharacters into the pypi_url setting and then installing a plugin that carries Python dependency metadata. The injected value is interpolated into a shell backtick inside PluginModel.install_phase2, so commands execute with access to the service's Redis and bucket storage credentials; in the open-source edition any authenticated user can reach both the setting-write and plugin-install operations, whereas the Enterprise edition requires the administrator role, and the vendor has fixed the issue in 7.3.0. There is no CISA KEV listing or confirmed in-the-wild exploitation, but the public vendor advisory GHSA-vp3w-52v9-q57f includes confirmed end-to-end proof-of-concept steps, and the independent assessment rates this as a genuine high-priority issue rather than CVSS inflation.

OS command injection in the frictionless-py framework through 5.20.0rc1 lets unauthenticated remote attackers execute arbitrary operating system commands in the victim's security context when the victim runs the `frictionless explore` console command against an attacker-supplied Data Package. The flaw is reachable because resource path values from an untrusted datapackage.json are concatenated unsanitized into a shell invocation (`vd {paths}` via os.system), so shell metacharacters placed in a path are interpreted by the shell rather than treated as a filename. Exploitation requires victim interaction (CVSS UI:A) - the user must deliberately explore the malicious package - and publicly available exploit code exists, including a proof-of-concept repository; there is no data provided indicating confirmed active exploitation, and the assessed CVSS:3.1 vector is AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (vendor CVSS:4.0 8.6, PR:N/UI:A), so impact is high on confidentiality, integrity and availability of the user's environment but gate-controlled by the social-engineering step.

Authenticated OS command injection in Zoho ManageEngine OpManager MSP 12.8.709 and below allows an attacker holding any valid low-privilege console account to execute arbitrary operating system commands on the server through the Notification Profile module, with no user interaction required. Exploitation yields full compromise of confidentiality, integrity and availability of the OpManager host, which for an MSP deployment typically means access to monitored customer infrastructure. The vendor rates the issue 9.9 (scope-changed); our independent assessment places it at high severity with unchanged scope, and no public exploit code has been identified at time of analysis, so the practical risk is concentrated in environments where operator or tenant accounts are widely provisioned or reusable.

Command injection in the Diagnose Settings feature of ZohoCorp ManageEngine OpManager and Firewall Analyzer 12.8.709 and earlier allows an authenticated low-privilege user to run arbitrary operating system commands on the host through the web management interface, resulting in complete loss of confidentiality, integrity, and availability (CVSS 8.8, PR:L, UI:N). Exploitation requires a valid low-privileged account and network reachability to the console, but no user interaction and no non-default configuration, so the management interface is the primary gating factor. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, meaning the practical risk is concentrated on internet- or partner-facing ManageEngine consoles where any account holder can reach the vulnerable feature.

Unauthenticated OS command injection in Changing CGServiSign enables a remote attacker to run arbitrary operating-system commands on a victim's machine when that victim is lured into visiting a malicious web page while CGServiSign's local service interface is running. The attacker needs no credentials and no access to the host (CVSS 4.0 8.6, PR:N, AC:L), but exploitation depends on user interaction (UI:A) plus the presence of this specific Taiwanese e-signature client with its local listener active, which meaningfully narrows the realistic target set. No public exploit code and no confirmed active exploitation were identified at time of analysis, and because the CPE is a wildcard over all versions, every deployment must be considered affected until a fixed build is published.

Server-side template injection in web.py 0.76 allows an attacker who can write to the application's template source directory to achieve arbitrary Python code and OS command execution on the server, but only when the application precompiles those templates and later renders them through the precompiled template loader; that specific deployment pattern is what defeats the template engine's built-in sandbox. The flaw is a genuine RCE-class issue (CWE-94) at CVSS 8.5, yet it is gated by real prerequisites: the CVSS vector indicates authenticated access (PR:L) and high attack complexity (AC:H), because the attacker must first obtain write access to the template directory and the application must use the precompiled code path rather than direct sandboxed rendering. It is not a remote-unauthenticated exploit against stock configurations, and no public exploit identified at time of analysis; exploitation is not confirmed actively exploited (CISA KEV) and no KEV entry is present in the source data.

OS command injection in OpenEye Apex Network Video Recorder firmware (2.2.3.4 through 3.2.9.376) allows an authenticated administrator to feed crafted backup-area configuration input into the recbackup routine, where it is passed unsanitized to a shell and executed with the privileges of the nvr service account. Rated CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), the issue is genuinely exploitable but access-gated: the attacker must already hold an administrator account and reach the management interface over the network, which confines realistic exposure to insiders, credential-theft or credential-reuse scenarios, and NVRs left on default or weak admin passwords. No public exploit code or confirmed active exploitation has been identified at time of analysis; OpenEye has released firmware 3.5.4 as the fix, with supporting detail in vendor advisory 1061 and the Securifera advisory.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker holding only low-level privileges to execute arbitrary operating-system commands on the affected deployment, giving full compromise of host confidentiality, integrity and availability (CVSS 8.8, vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation requires a valid account and network reachability to the DataStage service, plus the ability to reach a parameter or job-input path whose value is passed into a shell command without neutralization; no user interaction is needed and complexity is rated low. At time of analysis no public exploit code and no confirmed active exploitation were identified, and IBM has published a vendor patch via its support advisory.

Authenticated remote code execution in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an attacker who holds a valid, low-privileged account to inject and execute arbitrary operating system commands through the product's command-handling logic, giving full compromise of confidentiality, integrity, and availability on the affected deployment. The flaw is rated CVSS v3.1 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), so it is network-reachable and requires no user interaction, but it is gated behind authentication - making stolen credentials or a malicious insider the realistic threat model rather than anonymous internet-wide exploitation. A vendor patch is available from IBM, and no public exploit code or confirmed active exploitation was identified at time of analysis.

OS command injection in the px-runtime component of IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an authenticated, low-privilege remote attacker to execute arbitrary operating system commands on the affected host, with full loss of confidentiality, integrity, and availability. Exploitation requires only valid credentials on the Cloud Pak for Data instance and network reachability to the vulnerable component (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H = 8.8); it is not exploitable by unauthenticated users. No public exploit code has been identified at time of analysis, but IBM has published a vendor patch, and the low complexity of the flaw combined with high impact makes prompt upgrading advisable.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets a remote authenticated attacker with a low-privileged Cloud Pak for Data account execute arbitrary operating system commands on the affected node, resulting in full loss of confidentiality, integrity, and availability (C:H/I:H/A:H) with a CVSS 3.1 base score of 8.8. Exploitation is network-reachable and low-complexity with no user interaction (AV:N/AC:L/PR:L/UI:N), but it is gated behind a valid authenticated account that can reach the DataStage service, so exposure is limited to authenticated users of the 5.4.0.0 build. No public exploit code has been identified at time of analysis and there is no evidence of confirmed active exploitation; a vendor patch is available, so patched deployments are not exposed.

Authenticated OS command execution in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets a remote attacker with a valid account plant special elements in a DataStage input path that are passed unsanitized into an operating-system command, resulting in arbitrary command execution with the privileges of the DataStage service. The prerequisite is a legitimate authenticated session (CVSS PR:L) on a network-reachable instance (AV:N/AC:L, UI:N), which limits realistic exposure to authorized users, compromised credentials, or malicious insiders on unpatched 5.4.0.0 deployments. No public exploit code has been identified at time of analysis and the flaw is not confirmed actively exploited (CISA KEV), but the vendor rates impact at 9.9 and a vendor patch is already available, so urgency is driven mainly by patch adoption rather than observed exploitation.

Command execution in the HPE Analytics and Location Engine (ALE) web interface allows remote, high-privilege authenticated users to run arbitrary commands as root on the underlying host, resulting in complete compromise of the appliance. The flaw is network-reachable with low attack complexity and requires no user interaction, but the attacker must already hold valid administrative/high-privilege credentials for the ALE web interface (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, base 7.2 HIGH), which materially narrows the realistic attack surface to organizations running the ALE platform with its web interface exposed. No public exploit code has been identified at time of analysis, and no CISA KEV listing is associated with this CVE; successful exploitation yields full confidentiality, integrity, and availability impact because commands execute with root privileges.

Unauthenticated remote command execution in Softaculous Virtualizor before 3.2.9 Patch 9 (and the 3.0.0 branch) lets attackers take root on the host and all managed VPS instances by exploiting the billing module handler. Publicly available exploit code exists, and exploitation requires only network reachability to the billing/panel interface-no authentication or user interaction. Vendor patches are available in 3.2.9 Patch 9 and 3.3.0, making immediate upgrade the top priority.

Authenticated command injection in Lantronix SLC8000 console servers (before firmware v9.7.0.3), EMG8500/EMG7500 (before firmware v9.7.0.1), and the SLB882/SLCx-03/SLCx-02 families lets any account holding the 'services' permission run arbitrary shell commands as root via the 'set script schedule' CLI/terminal command, producing a complete loss of confidentiality, integrity and availability on the device and potentially on serial-attached downstream equipment. The vector is network-reachable and requires no user interaction, but it is gated behind a privileged role (PR:H) and reachability of the management/CLI plane, which limits practical exposure to devices whose out-of-band interface is exposed or improperly segregated. No public exploit code and no confirmed active exploitation were identified at time of analysis, and vendor patches exist for the SLC8000 and EMG models while SLB882/SLCx-03/SLCx-02 remain unpatched in all firmware versions per available data.

Root-level command injection in Lantronix console servers - SLC8000, EMG8500, EMG7500, SLB882, SLCx-03 and SLCx-02 - lets an authenticated user who holds the 'services' permission run arbitrary shell commands as root by abusing the 'set nfs download' command, whose parameter is passed unsanitized into a system() call, resulting in complete loss of confidentiality, integrity and availability on the device and potential downstream impact on serial-attached equipment. The privilege gate (PR:H) means anonymous or low-privilege users cannot trigger it and no user interaction is required once that role is held; authentication requirements are confirmed as privileged/authenticated by both the CVSS 4.0 vector (PR:H) and our assessed CVSS 3.1 vector (PR:H). There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, so this is a high-severity-but-not-currently-exploited defect. Lantronix has shipped firmware v9.7.0.3R3 for SLC8000 and v9.7.0.1R2 for EMG8500/EMG7500, while no fixed build has been published for SLB882, SLCx-03 or SLCx-02.

Authenticated command injection in Lantronix console/out-of-band management appliances (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) lets an attacker who already holds the 'services' permission reach the terminal or CLI interface and run arbitrary shell commands as root via a crafted `set cifs password` argument, resulting in complete loss of confidentiality, integrity and availability on the device and possible cascading impact on serial-attached downstream equipment. CVSS 4.0 rates this 9.4 (Critical) on an AV:N/AC:L/PR:H/UI:N vector with full VC:H/VI:H/VA:H and subsequent-system SC:H/SI:H/SA:H, and our independent CVSS 3.1 assessment (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) agrees on severity. The vendor has shipped patched firmware for SLC8000 (9.7.0.2) and for EMG8500/EMG7500 (9.7.0.1), while SLB882, SLCx-03 and SLCx-02 have no fix identified in any firmware version; no public exploit code was identified at time of analysis, and CISA KEV does not list this issue.

Authenticated command injection in Lantronix out-of-band console managers (SLC8000, EMG8500/EMG7500, SLB882, SLCx-03, SLCx-02) allows any logged-in user - no administrative rights required - to execute arbitrary shell commands as root by abusing an undocumented 'mfc eeprom write' CLI command whose parameter is passed unsanitized into a system() call. Successful exploitation yields complete loss of confidentiality, integrity, and availability on the device itself, and, because these are serial/console aggregation appliances, can extend to downstream serial-attached equipment (CVSS v4.0 base 9.4; independent assessment scores this CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Exposure is gated by prerequisites: a valid account of any privilege level plus network reachability to the terminal or CLI/console interface are required, and there is no public exploit identified at time of analysis - though the technical barrier is low for anyone who already holds credentials. Remediation is available for SLC8000 (9.7.0.2R1) and EMG8500/EMG7500 (9.7.0.1R2), but SLB882, SLCx-03, and SLCx-02 have no fix in any firmware version and require compensating controls.

Authenticated OS command injection in Lantronix out-of-band management appliances (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) allows any user holding valid CLI or terminal credentials - not necessarily administrative - to execute arbitrary shell commands as root through the undocumented 'mfc eeprom read' command, which passes an unsanitized parameter directly to a system() call. CVSS 9.4 with scope-changed impact (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) reflects total loss of confidentiality, integrity and availability on the appliance itself and plausible follow-on compromise of serial-attached downstream devices reachable through its console ports. Exploitability is gated by network reachability of the management interface plus valid low-privilege credentials; no public exploit code has been observed at time of analysis, but a public technical write-up lowers the discovery barrier, and the SLB882/SLCx-03/SLCx-02 model lines have no vendor fix.

Unauthenticated OS command injection in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) lets a network-reachable attacker execute arbitrary operating system commands on the host, enabling code execution, data tampering, denial of service, and information disclosure. Per the NVIDIA-assigned CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), no credentials or user interaction are required, so an exposed controller interface is directly attackable; CISA's SSVC assessment rates technical impact as total, though exploitation has not been observed and the decision framework does not classify the issue as automatable. No public exploit code has been identified at time of analysis, and EPSS places the short-term exploitation likelihood at 2.10% (81st percentile) - elevated relative to the broader corpus but not indicative of active campaigns.

Code injection in NVIDIA NeMo Speech versions 0.0 through 2.9 allows local attackers with low privileges to execute arbitrary code, disclose sensitive information, and tamper with data by supplying crafted input to the toolkit. The vulnerability requires local access (AV:L) and low privileges (PR:L) but no user interaction; it has a CVSS 3.1 base score of 7.8 (High) and is classified as CWE-77 (command injection). No public exploit code has been identified at time of analysis, and the vendor advisory at GitHub NVIDIA product-security 2026/5885 should be consulted for patch details.

Remote code execution in D-Link DAP-1360 firmware 6.14 and earlier allows unauthenticated attackers to execute arbitrary commands as root via crafted requests to the web management interface. Exploitation requires only network reachability to the device's HTTP management interface-no credentials, user interaction, or non-default configuration-and publicly available exploit code exists, making this a high-priority risk for exposed devices. Successful compromise enables persistent configuration changes and use of the device as a pivot into the local network.

Remote code execution affects Zohocorp ManageEngine ADSelfService Plus deployments running builds prior to 7001, where an OS command injection flaw (CWE-78) in the product's GINA / credential-provider client can be triggered with a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning unauthenticated remote attackers with no user interaction could achieve full confidentiality, integrity, and availability impact on the endpoint. The vulnerable component is the optional Windows endpoint agent that enables lock-screen self-service password reset, and because it executes in a pre-logon SYSTEM context, successful injection yields the highest possible privileges on the host. Our independent assessment lowers the exploitability sub-score to AC:H: realistic attack requires the agent to be deployed on Windows endpoints and an attacker to occupy a machine-in-the-middle or rogue-server position on the client-to-server channel rather than being a trivial internet-wide unauthenticated shot against a default server. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing); the vendor advisory is available at https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-74849.html.

Command injection in MaxKB before 2.10.5-lts allows unauthenticated remote attackers to execute arbitrary shell commands when an assistant is configured with a tool, MCP tool, skill, or sub-application. Untrusted chat messages or ingested documents can coerce the LLM into invoking the un-gated `execute` shell tool, which lacks human approval and is exposed by the SandboxShellBackend. Both source deployments with MAXKB_SANDBOX disabled and the official root container's vulnerable gosu wrapper permit command execution outside the intended sandbox; no public exploit code or confirmed active exploitation was identified at time of analysis. A vendor patch is available in version 2.10.5-lts.

Authenticated workspace members on MaxKB deployments prior to 2.10.5-lts can escalate to root-level command execution by abusing how the AWS Bedrock provider stores credentials. Because MaxKB writes user-supplied access_key_id and secret_access_key values into /root/.aws/credentials without proper parsing, an attacker can smuggle control characters and a forged [profile] block containing a credential_process directive, then trigger a later model-validation request that makes botocore run an attacker-controlled command as root. Exploitation requires valid workspace credentials, the reachable Bedrock provider configuration path, and a two-step inject-then-trigger sequence on a service running with root privileges; vendor-released patch 2.10.5-lts is available and no public exploit identified at time of analysis.