CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- wavlink wl-wn578w2, wl-wn578w2 firmware +1 moreWavlink WL-WN578W2 POST Request firewall.cgi command injection5.3 Medium
- cudy tr1200Cudy TR1200 ipsec.lua action_ipsec_conn command injection5.1 Medium
- d-link dir-820lw, dlink dir-820lw firmware +1 moreD-Link DIR-820LW SSDP ssdpcgi_main os command injection6.9 Medium
- totolink wa300, wa300 firmware +1 moreTotolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection6.9 Medium
- sigmade git-mcp-serversigmade Git-MCP-Server gitUtils.ts child_process.exec os command injection4.8 Medium
- tp-link systems inc. ax53 v1, tp-link archer ax53 firmware +1 moreAuthenticated Command Injection in mcsd Service of TP-Link Archer AX537.3 High
- comfast cf-ac100Comfast CF-AC100 mbox-config command injection5.1 Medium
- comfast cf-ac100Comfast CF-AC100 mbox-config command injection5.1 Medium
- comfast cf-ac100Comfast CF-AC100 mbox-config command injection5.1 Medium
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 formSysCmd os command injection5.3 Medium
- microsoft bing imagesMicrosoft Bing Images Remote Code Execution Vulnerability9.8 Critical
- microsoft copilotMicrosoft Copilot Information Disclosure Vulnerability6.5 Medium
- microsoft 365 copilotM365 Copilot Information Disclosure Vulnerability5.3 Medium
- dataease sqlbotSQLBot: Remote Code Execution via Terminology Poisoning8.6 High
- phoenix contact fl nat 2008, fl nat 2208, fl nat 2304-2gc-2sfp +74 more +76 moreCommand Injection Vulnerability in Root CA Certificate Transfer Workflow7.2 High
- roxy-wiRoxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE8.8 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service7.5 High
- dell thinos, thinos 10 +1 moreDell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of...7.8 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 Web UploadCfg route_set_user_policy_rule os command injection5.1 Medium
- lb-link bl-wr9000, bl-wr9000 firmware +1 moreLB-LINK BL-WR9000 set_wifi sub_458754 command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection5.3 Medium
- bazinga012 mcp code executorbazinga012 mcp_code_executor index.ts installDependencies command injection4.8 Medium
- hypermodel-labs mcp-server-auto-commithypermodel-labs mcp-server-auto-commit index.ts getGitChanges command injection4.8 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 wizard_mgr.cgi command injection5.3 Medium
- avinashbole quip-mcp-serverAvinashBole quip-mcp-server index.ts setupToolHandlers command injection5.3 Medium
- topsec topacmTopsec TopACM HTTP Request nmc_sync.php os command injection9.3 Critical
- wavlink wl-wn578w2Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection9.3 Critical
- wavlink wl-wn579a3Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection9.3 Critical
- microsoft 365 copilot, edge, excel +26 more +28 moreM365 Copilot Information Disclosure Vulnerability7.1 High
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the...9.8 Critical
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the...9.8 Critical
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities...9.8 Critical
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the...9.8 Critical
- No product listedOpenAkita Chat API Endpoint shell.py run os command injection4.8 Medium
- 0xkoda wiremcp0xKoda WireMCP Tshark CLI index.js server.tool os command injection4.8 Medium
- splunk, splunk cloud platform, enterprise +2 moreRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise8.0 High
- h3c acg1000-ak230H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection6.9 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection found in AOS-CX Administrative CLI Command7.2 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection found in AOS-CX CLI Command8.8 High
- cloudcli cloud cli, siteboon claudecodeui +1 moreCloud CLI has Command Injection via Multiple Parameters9.1 Critical
- github enterprise serverRemote code execution via git push option injection in GitHub Enterprise Server8.7 High
- budibaseBudibase has a Command Injection in PostgreSQL Dump Command8.6 High
- Show moreLoading…