CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- opencc jflowopencc JFlow WF_CCForm.java Calculate injection5.3 Medium
- comfast cf-ac100, cf-ac100 firmware +1 moreComfast CF-AC100 Request Path mbox-config sub_44AC14 command injection5.1 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection5.1 Medium
- totolink n300rh, n300rh firmware +1 moreTotolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection6.9 Medium
- ryuzakishinji biome-mcp-serverRyuzakiShinji biome-mcp-server biome-mcp-server.ts command injection5.3 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 adm.cgi usb_p910 command injection5.1 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection5.1 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection8.6 High
zeptoclawcrates.iozeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards10.0 Critical- openclawOpenClaw 2026.2.19-2 < 2026.2.21 - Command Injection via Newline in systemd Unit Generation6.9 Medium
- d-link dir-868l, dlink dir-868l firmware +1 moreD-Link DIR-868L SSDP Service sub_1BF84 os command injection9.3 Critical
- openclawOpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers5.8 Medium
- phialsbasement nmap-mcp-server, mcp nmap server +1 morePhialsBasement nmap-mcp-server Nmap CLI index.ts child_process.exec command injection5.3 Medium
- No product listedA command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository...7.8 High
- modelscope ms-agentCommand injection vulnerability in ModelScope's ms-agent6.5 Medium
- totolink n300rh, n300rh firmware +1 moreTotolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection9.3 Critical
- broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 moreVMware Aria Operations command injection vulnerability8.1 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick - Command Injection via SVG Decoder9.2 Critical
- nvidia cumulus linux, nvos, cumulus linux ga +1 more +3 moreNVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low...7.3 High
- nvidia cumulus linux, nvos, cumulus linux ga +1 more +3 moreNVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low...8.0 High
- exiftool project exiftoolexiftool PNG File MacOS.pm SetMacOSTags os command injection5.3 Medium
- intelbras tip 635g, tip 635g firmware +1 moreIntelbras TIP 635G Ping os command injection5.3 Medium
- hummerriskHummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection5.3 Medium
- hummerriskHummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection5.3 Medium
- hummerriskHummerRisk Cloud Task Scheduler ResourceCreateService.java command injection5.3 Medium
- draytek vigor 300b, vigor300b firmware +1 moreDrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection5.1 Medium
- dst-admin project dst-adminqinming99 dst-admin restore revertBackup command injection5.3 Medium
- vaelsysVaelsys HTTP POST Request tree_server.php os command injection6.9 Medium
- tosei online store management system ネット店舗管理システム, tosei-corporation online store management system +1 moreTosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection6.9 Medium
- owl opds, owlcyberdefense opds-talon +1 moreImproper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds8.7 High
- owl opds, owlcyberdefense opds-talon +1 moreImproper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds9.2 Critical
- enocean edge inc smartserver iotEnOcean SmartServer IoT Command Injection8.1 High
- utt hiper 520, 520 firmware +1 moreUTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection8.6 High
- utt hiper 520, 520 firmware +1 moreUTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection8.6 High
- comfast cf-e7, cf-e7 firmware +1 moreComfast CF-E7 webmggnt mbox-config sub_441CF4 command injection5.3 Medium
- comfast cf-e7, cf-e7 firmware +1 moreComfast CF-E7 webmggnt mbox-config sub_41ACCC command injection5.3 Medium
- wso2 identity serverServer-Side Template Injection via Velocity Template Engine in Multiple WSO2 Products Allows Remote Code Execution8.4 High
- seccn dingcheng g10SECCN Dingcheng G10 session_login.cgi qq os command injection9.3 Critical
- openclawOpenClaw: Unsanitized CWD path injection into LLM prompts8.6 High
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Background Management openvpn_apply os command injection8.6 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script,...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility,...7.8 High
- jishi node-sonos-http-apijishi node-sonos-http-api TTS Provider mac-os.js Promise os command injection6.9 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization...6.6 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection8.6 High
- kalcaddle kodboxkalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection5.3 Medium
- wayos fbm-220gWAYOS FBM-220G rc sub_40F820 command injection5.3 Medium
- yued-fe lulu uiyued-fe LuLu UI run.js child_process.exec os command injection6.9 Medium
- comfast cf-e4, cf-e4 firmware +1 moreComfast CF-E4 HTTP POST Request mbox-config command injection5.1 Medium
- comfast cf-n1 v2, cf-n1 firmware +1 moreComfast CF-N1 V2 mbox-config sub_44AB9C command injection5.3 Medium
- Show moreLoading…