CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- comfast cf-n1 v2, cf-n1 firmware +1 moreComfast CF-N1 V2 mbox-config sub_44AC4C command injection5.3 Medium
- tosei self-service washing machineTosei Self-service Washing Machine tosei_datasend.php command injection6.9 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi AddMac command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi DeleteMac command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 login.cgi command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi multi_ssid command injection5.3 Medium
- opensourcepos open source point of saleAn issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a...7.4 High
- jm33-m0 emp3r0remp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)9.3 Critical
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in watchOS 26.3, tvOS 26...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA logic issue was addressed with improved checks. This issue is fixed in watchOS 26.3, tvOS 26.3,...3.1 Low
- mealieA stored HTML injection vulnerability in the Recipe Notes rendering component in Mealie 3.3.1...5.4 Medium
- microsoft windows notepadWindows Notepad App Remote Code Execution Vulnerability7.8 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.3, visual studio 2022 +2 moreGitHub Copilot and Visual Studio Remote Code Execution Vulnerability8.8 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.3, visual studio 2022 +2 moreGitHub Copilot and Visual Studio Elevation of Privilege Vulnerability8.0 High
- microsoft github copilot, github copilot plugin for jetbrains ides +1 moreGitHub Copilot for Jetbrains Remote Code Execution Vulnerability8.8 High
- microsoft aci confidential containers, confcom +1 moreMicrosoft ACI Confidential Containers Elevation of Privilege Vulnerability6.7 Medium
- microsoft visual studio code, visual studio code copilot chat extension +1 moreGitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability8.8 High
- d-link dcs-931l, dlink dcs-931l firmware +1 moreD-Link DCS-931L setSysAdmin os command injection8.6 High
bitcoinrbRubyGemsBitcoinrb Vulnerable to Command injection via RPC2.0 Low- super-linterCommand injection via crafted filenames in Super-linter Action8.8 High
- d-link dcs-931l, dlink dcs-931l firmware +1 moreD-Link DCS-931L setSystemAdmin doSystem command injection5.1 Medium
- d-link dcs-933l, dlink dcs-933l firmware +1 moreD-Link DCS-933L alphapd setSystemAdmin command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_filtering sub_4211C8 os command injection8.6 High
- d-link di-7100g c1, dlink di-7100g c1 firmware +1 moreD-Link DI-7100G C1 start_proxy_client_email command injection5.3 Medium
- d-link di-7100g c1, dlink di-7100g c1 firmware +1 moreD-Link DI-7100G C1 set_jhttpd_info command injection5.3 Medium
- utt 进取 521g, 521g firmware +1 moreUTT 进取 521G formPdbUpConfig sub_446B18 os command injection8.6 High
- great developers certificate generation system, greatdevelopers certificate +1 moreGreat Developers Certificate Generation System csv.php os command injection6.9 Medium
- utt 进取 521g, 521g firmware +1 moreUTT 进取 521G setSysAdm doSystem command injection8.6 High
- polarvista xcode-mcp-server, r-huijts xcode mcp server +1 morer-huijts xcode-mcp-server run_lldb index.ts registerXcodeTools command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_upnp sub_420618 os command injection8.6 High
- d-link dwr-m921, dlink dwr-m921 firmware +1 moreD-Link DWR-M921 formLtefotaUpgradeFibocom command injection5.3 Medium
- d-link dwr-m921, dlink dwr-m921 firmware +1 moreD-Link DWR-M921 formLtefotaUpgradeQuectel sub_419920 command injection5.3 Medium
- totolink wa300, wa300 firmware +1 moreTotolink WA300 cstecgi.cgi setAPNetwork os command injection5.3 Medium
- d-link dir-600, dlink dir-600 firmware +1 moreD-Link DIR-600 ssdp.cgi command injection5.1 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_static_route_table sub_4175CC os command injection8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X Configuration set_dmz sub_4208A0 os command injection8.6 High
- d-link dir-615, dlink dir-615 firmware +1 moreD-Link DIR-615 Web Configuration adv_routing.php os command injection8.6 High
- d-link dir-615, dlink dir-615 firmware +1 moreD-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X DDNS Service set_ddns os command injection8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_qos sub_420688 os command injection8.6 High
- utt hiper 810, 810 firmware +1 moreUTT HiPER 810 formPdbUpConfig sub_43F020 command injection5.3 Medium
- xixianliang harmonyos-mcp-server, harmonyos mcp server +1 moreXixianLiang HarmonyOS-mcp-server input_text os command injection5.3 Medium
- burtthecoder mcp-maigret, maigret mcp server +1 moreBurtTheCoder mcp-maigret search_username index.ts command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_ac_status os command injection8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X Configuration Parameter set_server_settings os command injection8.6 High
- utt hiper 810, 810 firmware +1 moreUTT HiPER 810 rehttpd formReleaseConnect sub_4407D4 command injection8.6 High
- d-link dwr-m921, dlink dwr-m921 firmware +1 moreD-Link DWR-M921 USSD Configuration Endpoint formUSSDSetup sub_419F20 command injection8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_language os command injection8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_mac_clone os command injection5.1 Medium
- Show moreLoading…