OS Command Injection

Authenticated command injection in the MitraStar GPT-2742GX4X5v6-SV gateway (firmware GL_g2.5_100XNT0b23_3) lets an attacker who already holds valid web-interface credentials run arbitrary operating-system commands through the /cgi-bin/device-management-utilities-internet.cgi endpoint, taking full control of the device. The flaw is scored CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and maps to CWE-78, so compromise yields complete loss of confidentiality, integrity and availability of the unit. No CISA KEV entry or EPSS score was supplied with the intelligence, and no vendor-released patch has been identified; the cveorg reference points to a public GitHub repository that appears to carry technical detail, so publicly available exploit code should be assumed plausible pending verification.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote user execute arbitrary operating-system commands with the privileges of the DataStage service account (CVSS 8.8, CWE-78). The flaw requires valid credentials (PR:L) but no user interaction, and successful exploitation yields complete loss of confidentiality, integrity and availability on the affected host or container. IBM has published a vendor patch; there is no CISA KEV entry, no confirmed public exploit code, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', which lowers but does not eliminate real-world urgency for exposed deployments.

IBM DataStage on Cloud Pak for Data 5.4.0.0 fails to neutralize special characters in the PxPeek name property, allowing an authenticated remote user to inject and execute arbitrary operating-system commands on the DataStage engine. The flaw carries a CVSS base score of 8.8 (AV:N/AC:L/PR:L/UI:N), reflecting full loss of confidentiality, integrity, and availability for a low-privileged authenticated attacker. A vendor patch is available from IBM, no public exploit code or CISA KEV entry was identified at time of analysis, and CISA's SSVC assessment rates the issue as not automatable with no observed exploitation, making it a patch-promptly rather than drop-everything priority.

Local arbitrary code execution affects IBM App Connect Enterprise releases 13.0.1.0 through 13.0.8.0 and 12.0.1.0 through 12.0.12.27, caused by improper neutralization of special elements used in an OS command (CWE-78). Successful exploitation lets a local attacker run commands in the context of the App Connect Enterprise runtime, yielding high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.8, AV:L/AC:L/PR:N/UI:R). IBM has published a fix; CISA SSVC records Exploitation: none and Automatable: no, and no public exploit code or KEV listing was identified at time of analysis.

Unauthenticated OS command execution in PraisonAI's UI host applications (all versions before 4.6.59, confirmed on 4.6.48) lets remote attackers run arbitrary local commands as the PraisonAI UI service account by sending a single POST to /api/mcp/connect with attacker-chosen command and args values, because those values are handed to the MCP stdio client which spawns a local process. The default 'praisonai ui', 'praisonai ui agents' and 'praisonai claw' commands bind to 0.0.0.0 with no authentication, so the issue is exploitable against default configurations (CVSS 3.1 9.8, AV:N/AC:L/PR:N/UI:N, CWE-78) without credentials or user interaction, and the process is spawned even if the subsequent MCP handshake fails. It is not confirmed actively exploited (no CISA KEV listing) and EPSS is modest at 0.64% (49th percentile), but publicly available exploit code exists per CISA SSVC (Exploitation: poc, Automatable: yes, Technical Impact: total), and the vendor has released 4.6.59 which adds authentication and origin middleware.

Authenticated OS command injection in D-Link DWR-M921 firmware 1.1.52 allows a remote attacker with administrative credentials to execute arbitrary system commands on the router by injecting shell metacharacters into the `folderpath` parameter of the `/boafrm/formDiskCreateShare` endpoint, which passes the value unsanitized to a `system()` call. The affected endpoint handles USB disk share creation via the BoA embedded web server. A public proof-of-concept exploit has been disclosed on GitHub by researcher H3rmesk1t, though no active exploitation has been confirmed by CISA KEV at time of analysis.

OS command injection in D-Link DWR-M921 firmware 1.1.52 allows an authenticated remote attacker to execute arbitrary shell commands on the device by supplying a crafted `partition` argument to the `/boafrm/formDiskFormat` endpoint, which passes the value unsanitized to the `system()` call. Exploitation requires high-privilege (admin-level) credentials, but a publicly available proof-of-concept exploit hosted on GitHub lowers the barrier significantly. No vendor patch has been identified at time of analysis; the device's web management interface is the sole attack surface.

OS command injection in D-Link DWR-M920 firmware version 1.1.7 allows a network-adjacent or remote authenticated attacker to execute arbitrary operating system commands by manipulating the newPin parameter submitted to the /boafrm/formPinManageSetup endpoint. The vulnerability resides in the sub_41E60C function, which fails to sanitize user-supplied input before passing it to a system call. A publicly available proof-of-concept exploit exists. No public exploit identified at time of analysis as confirmed by CISA KEV, but exploit code is publicly available per VulDB and the GitHub reference.

OS command injection in Contec SolarView Compact (models SV-CPT-MC310 and SV-CPT-MC310F) allows any authenticated low-privilege user to execute arbitrary operating system commands through the Schedule Settings feature. Successful exploitation grants full control over the underlying device with high impact to confidentiality, integrity, and availability. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity makes this a straightforward target for any attacker holding valid credentials.

OS command injection in Contec's CAN-2-WF (Wireless LAN) and CAN-2-USB (USB) industrial communication converter units allows any authenticated user to execute arbitrary operating system commands on the device. The vulnerability, CWE-78, is reachable over the network with low privilege and no user interaction required, yielding full confidentiality, integrity, and availability impact on the affected unit. Reported by JPCERT/CC with a vendor advisory published; no public exploit code or active exploitation (CISA KEV) has been identified at the time of analysis.

Authenticated OS command injection in Contec CONPROSYS TM Series industrial devices allows any logged-in user to execute arbitrary operating system commands on the underlying host. Specifically, three CPS-TM341 model variants are confirmed affected per JVN advisory JVNVU96551518. Exploitation is straightforward once credentials are obtained, making credential theft or default-credential abuse a natural precursor attack chain.

OS command injection in Contec's CONPROSYS PAC Series industrial automation controllers allows any authenticated user to execute arbitrary OS-level commands on the device. Affected hardware includes the Integrated Type CPS-PC341 and Configurable Type CPS-PCS341 series programmable automation controllers, reported by JPCERT/CC. No public exploit code has been identified at time of analysis, but successful exploitation grants full control over the controller's underlying operating system.

OS command injection in CONPROSYS M2M Gateway and M2M Controller Series (CONTEC Co., Ltd.) allows an authenticated attacker to execute arbitrary operating system commands on affected industrial gateway devices. The vulnerability affects both the integrated and configurable variants of the CPS-MG341, CPS-MGS341, CPS-MC341, and CPS-MCS341 product lines, which are OT/IoT bridging devices commonly deployed in industrial automation environments. Exploitation requires only valid login credentials, and the CVSS 4.0 base score of 8.7 reflects high impact across confidentiality, integrity, and availability with no special attack conditions beyond authentication.

OS command injection in Contec's SGA1000 device allows an authenticated network attacker to execute arbitrary commands on the underlying operating system. The flaw (CWE-78) arises from insufficient sanitization of user-supplied input before it is passed to system shell calls, affecting all known versions per the wildcard CPE specifier. Reported via JPCERT/CC and confirmed by the vendor's own security advisory; no public exploit code has been identified at time of analysis.

OS command injection in Contec FX5000, FX4000, and FX3000 series industrial data loggers and remote I/O units allows authenticated network attackers to execute arbitrary operating system commands on affected devices. Exploitation requires valid credentials to the device management interface but no additional configuration or user interaction, giving a successful attacker full command execution capability at OS level. Reported by JPCERT and coordinated via JVN; no public exploit code exists and the vulnerability is not listed in CISA KEV at time of analysis.

Remote code execution in Spug through v3.4.0 allows authenticated users holding monitor permissions to inject arbitrary OS commands via the `/monitor/run_test/` HTTP endpoint, where user-supplied ping target addresses are interpolated directly into Python f-string shell commands executed with `subprocess.run(..., shell=True)`. Exploitation yields arbitrary command execution as the Spug process user, enabling full server takeover. No public exploit identified at time of analysis, but the vulnerable code path is trivially constructable from public source and the upstream patch commit is publicly visible.

OS command injection via filename manipulation in an ICS file-transfer interface allows authenticated network attackers to execute arbitrary commands with the privileges of an automated processing service. The flaw, tracked under ICSA-26-254-01 and reported by CISA ICS-CERT, affects a log-ingestion workflow where attacker-supplied filenames containing shell metacharacters are passed unsanitized to a system call. Successful exploitation enables read and write access to ingested operational log data and may serve as a pivot point for lateral movement within the operational technology network segment.

Command injection in projen's task synthesis component before version 0.103.0 allows context-dependent attackers to execute arbitrary commands on developer workstations or CI/CD runners. Shell metacharacters embedded in project configuration values or repository file names are interpolated unescaped into generated .projen/tasks.json task definitions, which execute when developers or automated pipelines invoke synthesized tasks. No public exploit code has been identified at time of analysis, but the supply-chain attack surface - malicious pull requests, forked repositories - significantly lowers the exploitation bar.

OS command injection in TUBITAK BILGEM's Pardus Software (the software center/package management application for the Pardus Linux distribution) allows a local unprivileged user to execute arbitrary OS commands, likely with elevated privileges. Versions before 1.0.5 are affected; the fix is available in 1.0.5. Reported by Turkish national CERT (USOM) and published via the Turkish cyber security authority's advisory portal. No public exploit code or active exploitation confirmed at time of analysis.

Unauthenticated root-level remote code execution affects WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922. The sync_server daemon listening on TCP port 13136 builds a shell command via sprintf() using an attacker-supplied filename and passes it to system() without sanitization, so a crafted filename containing shell metacharacters yields arbitrary command execution as root. Public exploit code exists (GitHub POC by camdsmith), reported by VulnCheck; the flaw is network-reachable with no authentication and no user interaction.

OS command injection in TUBITAK BILGEM's Pardus Boot Repair allows a local low-privileged user to execute arbitrary OS commands, likely resulting in full system compromise. The vulnerability (CWE-78) affects all versions prior to 1.0.8 of this boot repair utility for the Pardus Linux distribution. Given that boot repair tools typically run with elevated (root) privileges, this flaw effectively enables local privilege escalation to full system control with high confidentiality, integrity, and availability impact.

Command injection in Puppet Enterprise's java_keystore_passwd parameter handling allows authenticated Puppet administrators to execute arbitrary OS commands with root privileges. The parameter value is passed to a shell execution context without sanitization, enabling full system compromise from a high-trust but network-accessible role. No public exploit code or CISA KEV listing has been identified at time of analysis.

OS command injection in TP-Link Deco BE11000 V2's TDDP (TP-Link Device Debug Protocol) module enables unauthenticated adjacent-network attackers to execute arbitrary commands with root privileges by sending a single crafted UDP packet. The vulnerability results in complete device compromise, covering unauthorized command execution, configuration modification, and total loss of confidentiality, integrity, and availability. A vendor firmware patch is available via the TP-Link support page; no public exploit has been identified at time of analysis.

OS command injection in @argos-ci/core <=6.2.0 allows any attacker who can influence a CI pipeline's branch or ref name to execute arbitrary shell commands on the CI runner with the same privileges as the Argos upload process. The vulnerable sink is in packages/core/src/ci-environment/git.ts:89, where execSync() receives an unsanitized branch string interpolated into a template literal passed directly to /bin/sh -c, which evaluates $() command substitution and other metacharacters before spawning git. A fully working proof-of-concept exploit exists (GHSA-4x45-gxvp-6283) and the attack surface is widened by the fact that hasRemoteContentAccess: false - the configuration that triggers the vulnerable code path - is the default for projects without a connected Git provider integration.

Authenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.11.5 allows a low-privilege attacker to execute arbitrary OS commands by submitting crafted input that bypasses the platform's security scanner denylist. The root cause is an incomplete denylist (CWE-78) in the scanner responsible for gatekeeping executable content within AI workflow components - meaning certain command injection payloads are not intercepted and reach the underlying OS. No public exploit has been identified at time of analysis, though the authenticated-only barrier is a relatively low bar in multi-tenant or shared Langflow deployments.

Authenticated remote code execution in IBM Langflow OSS 1.0.0-1.11.5 allows a low-privileged attacker to execute arbitrary OS commands by supplying malicious command-line arguments through the MCP stdio server configuration interface. The root cause (CWE-78: OS Command Injection) is insufficient sanitization of user-controlled argument strings before they are passed to a subprocess invocation, giving the attacker OS-level code execution within the application's security context. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the authenticated-but-low-privilege attack path makes this a meaningful threat in multi-tenant or shared Langflow deployments.

Remote OS command execution in IBM Langflow OSS (versions 1.0.0 through 1.11.5) lets remote attackers run arbitrary operating-system commands due to improper neutralization of special elements passed into a shell command (CWE-78). Per the CVSS vector (PR:N/UI:N), exploitation requires no authentication or user interaction and yields full confidentiality, integrity, and availability impact on the host. No public exploit has been identified at time of analysis, though the vendor has released a patch.

Remote code execution in IBM DataStage on Cloud Pak for Data 5.4.0.0 permits any network-accessible authenticated user to inject and execute arbitrary OS commands on the underlying host. The CWE-78 flaw stems from insufficient sanitization of user-controlled input before it is passed to a system shell call, and the CVSS 8.8 vector (PR:L) confirms exploitation does not require administrative privileges - any valid account suffices. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor patch is available via the IBM support portal.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 enables remote authenticated attackers to execute arbitrary operating system commands on the underlying host. The CVSS 8.8 vector (PR:L/AV:N/AC:L) confirms that any low-privilege authenticated user can exploit this without special conditions or user interaction, achieving full confidentiality, integrity, and availability compromise. IBM has released a patch via advisory 7286562, and no public exploit has been identified at time of analysis.

Remote authenticated OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 enables a network-accessible low-privileged user to execute arbitrary operating system commands on the underlying host. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms that any authenticated DataStage account - including data engineers or analysts, not just administrators - can trigger full confidentiality, integrity, and availability compromise of the affected component. A vendor patch is available; no public exploit or CISA KEV listing has been identified at time of analysis.

OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 enables remote authenticated attackers to execute arbitrary operating system commands, achieving full compromise of the affected system. The CVSS 8.8 score (AV:N/AC:L/PR:L) reflects low-complexity network exploitation gated only by a valid low-privilege credential, with complete confidentiality, integrity, and availability impact on the DataStage host. IBM has released a patch; no public exploit code or CISA KEV listing has been identified at time of analysis.

Command injection in Lenovo's Tianxi AI Agent PC Application allows a local user, tricked into opening a specially crafted link, to execute arbitrary operating system commands on the affected machine. The vulnerability is rooted in inadequate sanitization of link content that the application processes through what is likely a registered URI scheme or deep-link handler. The product is distributed exclusively in the Chinese market, limiting global exposure, but the high C/I/A impact (VC:H/VI:H/VA:H in CVSS 4.0) means full user-context compromise is achievable with a single successful interaction.

OS command injection in FileRun before 2026.3.0 enables a network-accessible superuser to execute arbitrary commands on the underlying server, exploiting a deliberate no-op redefinition of PHP's escapeshellcmd() in CLI.php that strips all shell metacharacter escaping before attacker-controlled input reaches exec(). Two distinct exploitation paths exist: an immediate interactive path via image_preview.php with a crafted args parameter requiring superuser authentication, and a more dangerous persistent backdoor path where malicious payloads stored by an admin in thumbnails_ffmpeg_args or thumbnails_ffmpeg_ss execute automatically whenever any user triggers video thumbnail generation. Publicly available exploit code from VulnCheck confirms practical exploitability; vendor-released patch 2026.3.0 is available.

OS command injection in FileRun's PhotoProofSheet handler allows any authenticated user with upload permission to execute arbitrary commands as the web-server user by uploading files with shell metacharacters in their names. The root cause is a missing escapeshellarg() call when constructing the ImageMagick montage shell command, meaning backticks, semicolons, or $() sequences in filenames are evaluated by the shell. A public proof-of-concept has been released by VulnCheck; vendor-released patch is available in version 2026.3.0.

Root-level OS command injection in ConfigServer Security & Firewall (CSF) lets a remote attacker who controls a configured allow/deny feed inject arbitrary shell commands through the advanced-rule parser, which executes them as root. The affected code exists both in the original ConfigServer distribution and in the WebPros-maintained fork; WebPros fixed it in version 16.30. There is no public exploit identified at time of analysis and no CISA KEV listing, so this is a high-severity but not yet demonstrated-exploited issue.

Remote code execution in ConfigServer Security & Firewall (CSF) allows an unauthenticated attacker to run arbitrary OS commands as the CSF service account through shell command injection stemming from improperly escaped request URLs. It affects the original ConfigServer distribution and the WebPros-maintained fork containing the vulnerable code, and is fixed in WebPros version 16.30. No public exploit has been identified at time of analysis, but because CSF's login-failure daemon typically runs with root-level privileges, successful exploitation grants full server control.

Authenticated remote command execution in Dell ThinOS 10 (builds prior to 2605_10.2616) allows an attacker who already holds high administrative privileges on the device to inject OS commands into a privileged management function, achieving command execution with high confidentiality, integrity, and availability impact. The assessed vector (CVSS 7.2, AV:N/AC:L/PR:H/UI:N) means the flaw is not reachable by an anonymous remote attacker and is not automatable per CISA SSVC, which records no exploitation activity; no public exploit code was identified at time of analysis. EPSS sits at a moderate 2.28% (82nd percentile), consistent with a privilege-gated issue rather than a mass-exploitation emergency.

Remote code execution in Dell ThinOS 10 (versions prior to 2605_10.2616) allows an unauthenticated remote attacker to inject and execute arbitrary OS commands via improper neutralization of special elements in a command context (CWE-78). Dell released the vulnerability itself (DSA-2026-389) and a fixed build is available; there is no public exploit identified at time of analysis and the CVE is not on CISA KEV.

Remote code execution in Dell ThinOS 10 (all versions prior to 2605_10.2616) allows an unauthenticated attacker who already sits on the same logical or physical network segment as the thin client to run arbitrary commands on the device. No credentials and no user interaction are required, and the vendor CVSS 3.1 vector scores it 8.8 (High) with full confidentiality, integrity and availability impact, but the adjacent (AV:A) attack vector means it is not reachable from the general internet or across routed boundaries by default. There is no public exploit identified at time of analysis and no CISA KEV listing; EPSS is 1.29% (69th percentile), CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', and Dell has published a fix via advisory DSA-2026-389.

OS command injection in ICEcoder through 8.1 allows authenticated low-privilege users to execute arbitrary operating system commands as the web-server user. The flaw resides in lib/properties.php (line 37), where a user-supplied filesystem directory path is passed without any shell metacharacter escaping into a popen() call. An attacker with ICEcoder login access can create a directory whose name embeds shell metacharacters, then invoke the Properties function to trigger command execution. No public exploit or CISA KEV listing is confirmed at time of analysis, but a detailed researcher advisory with source-code references is publicly available on GitHub.

Command injection in Renovate's Maven Wrapper manager allows an attacker with write access to a scanned repository to execute arbitrary OS commands on the host running Renovate when `binarySource=docker` mode is active. Unescaped `distributionType` values from `maven-wrapper.properties` are passed directly to a shell, giving the attacker full code execution in the Renovate process context. No public exploit or CISA KEV listing exists at time of analysis; vendor-released patch is available at version 44.14.7.

Command injection in Renovate's Mix package manager allows an attacker who can control private dependency package names to execute arbitrary OS commands as the Renovate process user. Versions before 44.14.7 fail to escape organization parameters before passing them to shell commands during dependency resolution in binarySource=docker mode. No public exploit code has been identified at time of analysis, but the attack surface is reachable whenever Renovate processes Elixir/Mix private dependencies under the affected configuration.

Command injection in Renovate's Gradle Wrapper manager module allows a repository contributor to execute arbitrary OS commands on self-hosted Renovate instances. Open-source versions before 44.14.7 and Mend Renovate CE/EE before 15.4.0 fail to escape the `distributionUrl` value read from a repository-controlled `gradle/wrapper/gradle-wrapper.properties` file before passing it to the Gradle Wrapper CLI, enabling shell metacharacter injection. Exploitation is constrained to self-hosted deployments explicitly configured with `binarySource=docker` and `gradleWrapper` in `allowedUnsafeExecutions`; no public exploit code or active exploitation has been identified at time of analysis.

Command injection in Renovate's gomod manager (before 44.14.7) exposes CI/CD pipelines to arbitrary shell command execution as the Renovate user when a maliciously crafted Go module dependency name containing shell metacharacters is processed. The flaw is exercised only under two simultaneously required non-default configurations - `binarySource=docker` mode and `postUpdateOptions gomodUpdateImportPaths` enabled - confining exposure to a specific subset of Renovate deployments performing Go module major version updates. No public exploit code and no CISA KEV listing have been identified at time of analysis.

Root-level command injection in GeoVision GV-LPC2211 and GV-LPC2011 license plate recognition cameras (firmware V1.13) allows an authenticated administrator to execute arbitrary OS commands as root by embedding shell metacharacters in the FTP account username field. The injected payload is executed during a subsequent FTP-account update operation, yielding complete device compromise. No public exploit is identified at time of analysis, and no confirmed patched firmware version has been independently verified.

Authenticated ONVIF command injection in GeoVision GV-LPC2211 V1.13 allows a low-privileged network attacker to execute arbitrary OS commands as root via the ConsumerReference.Address parameter of the ONVIF event subscription interface. The vulnerability stems from unsanitized user-controlled input passed directly to a shell interpreter on the device. Full device compromise - including credential extraction, persistent backdoor installation, and lateral movement within the physical security network - is achievable by any valid ONVIF account. No public exploit has been identified at time of analysis, and no KEV listing is present.

OS command injection in GeoVision GV-LPC2211 firmware V1.13 allows an authenticated administrator to execute arbitrary commands with root privileges by setting a WEP key value containing embedded shell metacharacters. The root cause (CWE-78) is unsanitized passthrough of administrator-supplied WiFi configuration input into a system shell call on the embedded device OS. No public exploit code or active exploitation has been identified at time of analysis.

OS command injection in GeoVision GV-LPC2011/LPC2211 firmware V1.13 allows an authenticated administrator to achieve root-level command execution on the device by embedding shell metacharacters in the WPA-PSK (Wi-Fi pre-shared key) field of the wireless configuration. When the configuration is saved and applied, the unsanitized PSK value is passed to a shell command without escaping, executing attacker-controlled code as root. No public exploit code or active exploitation has been identified at time of analysis, but the requirement for only administrator credentials - typically held by installers or facility operators - limits but does not eliminate abuse potential.

OS command injection in GeoVision GV-LPC2011/LPC2211 firmware V1.13 allows an authenticated administrator to execute arbitrary shell commands as root by setting a crafted wireless SSID containing shell metacharacters. The device's SSID configuration field passes user-controlled input unsanitized to the underlying embedded Linux shell, yielding full root-level control over the device. No public exploit code or active exploitation has been identified at time of analysis, but root impact on a network-connected physical security device makes this a meaningful risk wherever admin credentials could be reused or stolen.

Command injection in GeoVision GV-LPC2011/LPC2211 firmware version 1.13 allows an authenticated administrator to execute arbitrary OS commands as root by injecting shell metacharacters into the PPPoE username field. The device sources the username value directly within a shell configuration assignment, enabling a breakout to arbitrary command execution. No public exploit code or CISA KEV listing has been identified at time of analysis, but full root compromise is achievable by any user with administrative access to the device's web interface.

Stored OS command injection in GeoVision GV-LPC2211 V1.13 allows an authenticated administrator to achieve arbitrary root-level code execution on the embedded device by crafting a username that contains shell metacharacters, which are unsafely interpolated into a shell command when the account is later deleted. The vulnerability affects both the GV-LPC2011 and GV-LPC2211 license plate recognition camera models per the CPE entry. No public exploit code or active KEV-listed exploitation has been identified at time of analysis.

Remote code execution in Amazon awslabs postgres-mcp-server before 1.1.7 lets remote actors run arbitrary OS commands on the host of a self-managed PostgreSQL server, even in the server's default read-only mode. The read-only enforcement in the SQL validation component fails to reject PostgreSQL's COPY ... TO PROGRAM construct, so a crafted statement embedded in content processed when an authenticated user interacts with the MCP server executes shell commands on the database host. No public exploit identified at time of analysis; the flaw is fixed in 1.1.7 and documented in AWS bulletin 2026-104 and GHSA-fph8-pg5w-78fv.

Authenticated remote code execution in HPE Aruba ClearPass Policy Manager (CPPM) allows a high-privileged attacker to access directory information through the web interface and then escalate that access to arbitrary OS command execution on the underlying system. The attack requires valid credentials with elevated privileges (PR:H per CVSS) but is otherwise straightforward - no interaction from another user is needed and complexity is low. No public exploit code or active exploitation has been identified at time of analysis, but the full C:H/I:H/A:H impact and network-accessible attack surface make this a priority patch target for CPPM deployments.

Remote code execution in HPE Aruba ClearPass Policy Manager (CPPM) allows an authenticated attacker with high-privilege access to the web-based management interface to execute arbitrary commands on the underlying operating system. The attack is network-reachable with no user interaction required beyond obtaining administrator credentials. No public exploit has been identified at time of analysis, but full system compromise is achievable upon successful exploitation.

Privilege escalation to root in Schneider Electric PowerLogic T300 (versions 2.9.8-5620 and prior) is achievable by an authenticated SSH user through OS command injection in the device's operating system console. An attacker with high-privilege SSH access can inject shell metacharacters into user-controlled console input that the device fails to properly sanitize, breaking out of the intended command context to execute arbitrary commands as root and perform unauthorized administrative operations. No public exploit code or CISA KEV listing has been identified at time of analysis; the CVSS 4.0 score of 8.7 reflects subsequent-system impact rated High, consistent with the device's ICS/energy-metering deployment context.

OS command injection in Dell iDRAC9 and iDRAC10 baseboard management controllers permits a high-privileged remote attacker to execute arbitrary operating system commands on the BMC firmware layer. Affected generations span iDRAC9 14G (pre-7.00.00.184), iDRAC9 15G/16G (pre-7.30.10.50), and iDRAC10 17G (pre-1.30.30.50). Dell has released patched firmware across all affected generations; no public exploit or active exploitation is identified at time of analysis.

OS command injection in Dell Secure Connect Gateway (SCG) 5.0 enables a locally authenticated low-privilege attacker to execute arbitrary operating system commands, resulting in full confidentiality, integrity, and availability compromise of the affected system. Both the Appliance deployment form (virtual/hardware) and the Application package are affected, with fix versions 5.36.00.16 and 5.36.00.00 respectively confirmed by Dell advisory DSA-2026-382. No public exploit code and no CISA KEV active-exploitation listing are identified at time of analysis.

OS command injection in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) variants - enables a locally authenticated low-privileged attacker to execute arbitrary operating system commands, yielding full compromise of confidentiality, integrity, and availability of the affected host. Dell confirmed the issue in advisory DSA-2026-382 and released patches for both deployment forms. No public exploit code or active exploitation has been identified at time of analysis; SSVC rates exploitation as none and the attack as non-automatable.

Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 Virtual Edition allows an unauthenticated network attacker to inject arbitrary operating-system commands via improperly neutralized special elements (CWE-78). Affected are the SCG 5.0 Appliance component before 5.36.00.16 and the SCG 5.0 Application component before 5.36.00.00; a vendor patch is available via Dell advisory DSA-2026-382. No public exploit identified at time of analysis, but the network-reachable, no-authentication attack path and 9.8 CVSS make this a high-priority remote-takeover risk.

Command injection in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance (before 5.36.00.16) and Application (before 5.36.00.00) variants - allows an unauthenticated remote attacker to inject and execute commands, described by Dell as script injection. The CVSS 9.8 vector rates all three impacts as high (C:H/I:H/A:H), though CISA SSVC scores the technical impact as only partial. No public exploit identified at time of analysis and SSVC exploitation status is 'none', but the flaw is marked automatable, raising the risk of scanning-driven mass exploitation once a technique surfaces.

OS command injection in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application deployment forms - enables a locally authenticated low-privileged user to inject and execute arbitrary operating system commands. Affected are Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with full confidentiality, integrity, and availability impact on the underlying host. No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as currently none with non-automatable attack delivery.

OS command injection in Dell Secure Connect Gateway (SCG) 5.0 enables a low-privileged authenticated remote attacker to inject arbitrary OS commands and escalate to full system control, achieving complete confidentiality, integrity, and availability compromise. Both the SCG 5.0 Appliance (fixed in 5.36.00.16) and SCG 5.0 Application (fixed in 5.36.00.00) variants are affected. No public exploit identified at time of analysis, and the high attack complexity (AC:H) suggests a specific condition or non-trivial technique is required beyond simple credential possession.

OS command injection in Tanium Enforce enables a local attacker to execute arbitrary operating system commands at the privilege level of the Enforce agent process. The flaw (CWE-78) requires user interaction and specific exploitation preconditions, reflected in a CVSS 7.0 score despite full C:H/I:H/A:H impact ratings. Tanium self-disclosed the issue via advisory TAN-2026-022; no public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.

CVE-2026-85013 is attributed to Ubuntu (vendor source only) but carries no description, CVSS score, CWE classification, or reference material in the available intelligence. Without a description or technical details, the vulnerability type, affected component, impact, and exploitation conditions cannot be established. This record should be treated as a placeholder pending vendor disclosure.

OS command injection in Adobe Campaign Classic (ACC) versions up to and including 7.4.4 build 9401 allows attackers to execute arbitrary code in the context of the running user with no user interaction. Adobe PSIRT rates this a maximum-severity CVSS 10.0 issue with a changed scope, meaning a successful exploit can affect resources beyond the vulnerable component. No public exploit has been identified at time of analysis and it is not listed in CISA KEV.

Command injection (CWE-77) in Microsoft Azure CLI versions 1.0.0 through 2.2.0 allows a low-privilege authenticated attacker to execute arbitrary commands over a network when user interaction is obtained. The Scope Changed attribute in the CVSS vector indicates injected commands can break out of the CLI security context and affect resources beyond the immediate process - likely Azure resource management operations or the underlying host OS. Vendor patch is available at version 2.2.1; no public exploit code or CISA KEV listing has been identified at time of analysis.

OS command injection in Azure HDInsight allows a network-accessible, high-privileged attacker to escalate privileges on the underlying cluster infrastructure. The vulnerability (CWE-78) arises from insufficient neutralization of special characters passed to OS-level commands within the HDInsight control plane or management interface, enabling an authorized administrator to break out of their intended permission scope and execute arbitrary OS commands. Reported via Microsoft MSRC (secure@microsoft.com), a vendor patch has been released; no public exploit code or CISA KEV listing is present at time of analysis.

Command injection in the Windows Program Compatibility Assistant (PCA) Service enables local privilege escalation across a broad range of Windows 10, Windows 11, and Windows Server editions. An authenticated low-privilege attacker can inject shell commands through the PCA service's unsanitized input handling (CWE-77), achieving full control of the local system with C:H/I:H/A:H impact. No public exploit code or CISA KEV listing is identified at time of analysis, but the wide Windows install base and low exploitation complexity make patching high priority.

Command injection in Fortinet FortiSandbox allows a remote, highly privileged attacker to execute arbitrary OS commands on the underlying system, achieving full confidentiality, integrity, and availability compromise. Affected versions span FortiSandbox 4.2.1-4.2.8, 4.4.0-4.4.9, 5.0.0-5.0.6, and 5.2.0, covering a wide release range across multiple major branches. The temporal CVSS metrics (E:F/RL:O/RC:C) confirm that a functional exploit exists and an official patch has been released, making prompt patching the priority action.

Remote code execution in Snipe-IT before 8.7.0 allows authenticated superadministrators to execute arbitrary OS commands on the server by uploading a crafted backup archive and triggering a restore. The vulnerability stems from Snipe-IT piping SQL backup content directly into the MySQL/MariaDB command-line client without the --binary-mode flag, causing the client to interpret backslash escape sequences (e.g., \!) as local shell commands rather than SQL. Successful exploitation exposes sensitive application secrets including database credentials and APP_KEY, and permits modification of any file writable by the web application process. No public exploit or KEV listing has been identified at time of analysis.

OS command injection in the Netis NX10 router's ping diagnostic handler allows authenticated administrators to execute arbitrary commands as root by embedding shell metacharacters in the IpAddr parameter. The device's firmware (V4.0.1.5808 and V3.0.0.4142) interpolates this parameter directly into a system() call with an incomplete denylist that filters spaces, pipes, semicolons, and ampersands but leaves command substitution syntax ($() and backticks) and IFS-based space bypasses fully exploitable. A publicly available exploit is referenced via VulnCheck and hackwithmike.com; no vendor-released patch has been identified at time of analysis.

OS command injection in Hitachi Cosminexus Component Container - the application-server/EJB container within Hitachi Cosminexus/uCosminexus Application Server - allows remote attackers to inject and execute arbitrary operating-system commands (CWE-78). The flaw spans a broad set of legacy and current branches from 09-00 through 11-70 and carries a CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) rating, implying unauthenticated network reachability with full confidentiality, integrity, and availability impact. No public exploit was identified at time of analysis and the issue is not listed in CISA KEV.

Authenticated OS command injection in Dogtag PKI's certificate profile import mechanism allows a CA Administrator to achieve code execution as the pkiuser account on RHEL 6-10 and Red Hat Certificate System 9. By uploading a crafted certificate profile that exploits the ExternalProcessConstraint mechanism with attacker-controlled environment variables, a privileged attacker can bypass the limited profile ID validation and execute arbitrary system commands. No public exploit or active exploitation is known at time of analysis, but the CVSS 7.2 / PR:H rating reflects that CA Administrator access is a prerequisite.

Arbitrary binary execution in knowns before 0.30.0 is triggered when a developer opens a repository containing a crafted .knowns/config.json with a malicious settings.lsp.languages binary value. The LSP subsystem passes the attacker-controlled binary path directly to OS execution routines without any allowlist check, invoking the path twice under the victim's user account with no verification step. No public exploit is identified at time of analysis, though the GitHub security advisory GHSA-mc52-mwq4-vfx3 and the patch commit d3989829 provide full technical detail on both vulnerable code paths.

OS command injection in Dell Secure Connect Gateway (SCG) 5.0 allows a high-privileged remote attacker to inject arbitrary OS commands through the application's management interface, achieving privilege escalation beyond the application boundary to OS-level access. Both the SCG 5.0 Appliance (prior to 5.36.00.16) and SCG 5.0 Application (prior to 5.36.00.00) are affected, confirmed by Dell advisory DSA-2026-382. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; Dell has released patched versions for both product variants.

Shell command injection in the Cockpit 389 Console allows an LDAP user with delegated entry-creation privileges to achieve root code execution on the directory server host. The 389-ds-base package, as deployed in Red Hat Directory Server 11/12/13 and RHEL 6-10, constructs ldapsearch commands by embedding LDAP distinguished names directly into shell strings without escaping metacharacters. An attacker controlling LDAP write access can plant a malicious DN; when a Cockpit administrator views that entry, injected shell commands execute with root privileges. No public exploit code or CISA KEV listing has been identified at the time of analysis.

Argument injection in LibreNMS's graph_title parameter allows authenticated low-privilege users to break out of double-quote escaping and inject arbitrary rrdtool arguments, effectively bypassing per-device authorization controls. Affected versions prior to 26.8.0 permit attackers to inject DEF and LINE directives to read RRD files from devices they are not authorized to access, or use newline injection to execute arbitrary rrdtool commands. No public exploit or CISA KEV listing has been identified at time of analysis, but the attack requires only a valid low-privilege account, lowering the exploitation bar significantly.

Unauthenticated OS command injection in Dell Secure Connect Gateway (SCG) 5.0 Application (versions prior to 5.36.00.00) exposes affected systems to remote code execution by any network-reachable attacker. The flaw (CWE-78) allows injection of shell metacharacters through an unspecified application input that is passed unsanitized to a system call, enabling arbitrary command execution on the gateway host. Dell has released version 5.36.00.00 via advisory DSA-2026-382; no public exploit code or CISA KEV listing has been identified at time of analysis.

OS command injection in Linksys RE7000 firmware 2.0.15 allows authenticated low-privilege attackers to execute arbitrary commands on the device by manipulating the pingTestIp, pingTestPktSize, or pingTestTimes parameters of the PingTest CGI handler. The /cgi-bin/json.cgi?PingTest endpoint passes these parameters unsanitized to underlying shell commands, resulting in full device compromise and potential impact to adjacent network infrastructure. A public proof-of-concept exploit is available on GitHub, substantially lowering the exploitation barrier.

Command injection in Advantech WISE-6610 series industrial IoT gateways allows a remotely authenticated attacker with low privileges to execute arbitrary OS commands via the Node-RED Library's nodered_lib_apply function. All thirteen WISE-6610 firmware variants at version 1.2.1_20251110 are confirmed affected, and a public exploit is available. Advantech has released firmware 1.2.4_20260821 as the fix, with no active exploitation (CISA KEV) confirmed at time of analysis.

Command injection in Advantech WISE-6610 LoRaWAN gateway firmware 1.2.1_20251110 allows a remote low-privileged attacker to execute arbitrary OS commands by manipulating the act parameter in the Basic Station Certificate-Deletion Handler (basicstation_apply function). All 13 WISE-6610 hardware variants are affected, spanning NB, EB, TB, JB, CB, EL-series, and P-series models deployed in industrial IoT environments. A public proof-of-concept exploit has been disclosed; upgrading to firmware 1.2.4_20260821 resolves the issue.

OS command injection in Tenda HG10 GPON router firmware 300001138 allows authenticated network attackers to execute arbitrary shell commands on the device by manipulating the `fmgpon_loid` parameter in the `/boaform/admin/formgponConf` endpoint served by the Boa embedded web server. The `fmgpon_loid` argument (GPON Line OID) is passed unsanitized to a system call (CWE-78), giving an attacker full control over the underlying Linux OS. A public proof-of-concept exploit exists on GitHub, and the CVSS 4.0 E:P supplemental metric confirms exploit code is available.

OS command injection in the Tenda CP3 IP camera (firmware 27.5.57.101) lets remote attackers execute arbitrary shell commands via the CAutoAddWifi::ThreadProc function of the Kylin component's AutoAddWifi.cpp. The flaw is reachable without authentication over the network and yields full device compromise. No public exploit has been identified at time of analysis, and the report originates from a single source (VulDB).

OS command injection in the Tenda CP3 IP camera (firmware 27.5.57.101) lets an attacker inject shell commands through the function sub_2F77E8 in Apis/system.c, part of the Network Configuration Management component. Successful exploitation yields arbitrary command execution on the camera's embedded Linux OS. The CVSS 4.0 vector requires high privileges (PR:H), and no public exploit or active exploitation has been identified at time of analysis.

OS command injection in the Tenda CP3 IP camera (firmware 27.5.57.101) lets attackers inject shell commands through the interface_name and host arguments handled in Net/NetCheckPing.cpp, yielding arbitrary command execution on the device. The network-connectivity/ping diagnostic routine passes attacker-controlled input into a system shell without sanitization, and the attack is reachable over the network. No public exploit identified at time of analysis; the sole source is a VulDB submission.

OS command injection in the Tenda CP3 IP camera (firmware 27.5.57.101) lets attackers inject shell commands through the AlarmVoiceURL argument handled by the SystemAsh function in Apis/system.c (Kylin component). Because the value is passed into a system-level shell call without sanitization, a successful request yields arbitrary command execution on the camera's embedded Linux OS. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV, but the flaw is remotely reachable.

Remote code execution in SonicWall Network Security Manager (NSM) On-Prem 4.3.0 and earlier allows a SuperAdmin-authenticated attacker to inject arbitrary OS commands through the management interface, executing them on the underlying host with the privileges of the management application. Because exploitation requires the highest-tier SuperAdmin role (CVSS PR:H), the real-world attack surface is narrower than the 9.1 score alone suggests. There is no public exploit identified at time of analysis and no KEV listing.

Local privilege escalation to root in Amazon's log4j-cve-2021-44228-hotpatch package (Amazon Linux before version 1.3-9) stems from an OS command injection flaw triggered when the hotpatch daemon processes a Java executable whose filesystem path contains embedded newline characters. A low-privileged local user can craft such a path and launch a Java process, causing the unpatched daemon to pass the unsanitized path into a shell command and execute the injected content with root privileges. Amazon has released a patched version (1.3-9) via ALAS2-2026-3784; no public exploit or CISA KEV listing has been identified at time of analysis.

OS command injection in IBM i 7.3 through 7.6 allows a local, low-privileged attacker to execute arbitrary operating system commands by supplying specially crafted input containing shell metacharacters that the platform fails to sanitize before passing to an OS command interpreter. The vulnerability (CWE-78) affects IBM's flagship Power Systems operating system across four supported release lines and carries a CVSS 7.8 score reflecting full confidentiality, integrity, and availability impact upon successful exploitation. No public exploit code or CISA KEV listing exists at time of analysis; a vendor-released patch is available via IBM support.

Local OS command injection in IBM i 7.3 through 7.6 allows a low-privileged local user to execute arbitrary system commands, achieving full system compromise (confidentiality, integrity, and availability all at High). The vulnerability stems from insufficient neutralization of shell metacharacters in OS command construction (CWE-78). No public exploit code has been identified and EPSS sits at 0.11% (1st percentile), but IBM has confirmed the issue and released a patch via support page node/7285844.