CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- comfast cf-n1-sCOMFAST CF-N1-S mbox-config sub_44A968 command injection5.1 Medium
- edimax ew-7478apcEdimax EW-7478APC stainfo command injection5.3 Medium
- edimax ew-7478apcEdimax EW-7478APC setWAN command injection5.3 Medium
- edimax ew-7478apcEdimax EW-7478APC formWlbasic command injection5.3 Medium
- microsoft powershell, powershell 7.6, microsoft powershell 7.4 +1 more +3 moreMicrosoft PowerShell Remote Code Execution Vulnerability7.8 High
- baicells eg3661mBaicells EG3661M LuCI Web luci os command injection8.6 High
- tenda ch10, ch7, ch7g +7 more +9 moreTenda CH7 ATE Module Kylin HandleCmd command injection9.3 Critical
- notepad-plus-plusNotepad++: Install-time PowerShell command injection through installation path5.4 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +4 more +6 moreMicrosoft Office Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Information Disclosure Vulnerability6.5 Medium
- microsoft azure monitor agent, azure monitor agent linux extension +1 moreAzure Monitor Agent Elevation of Privilege Vulnerability7.2 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Active Directory Domain Services Remote Code Execution Vulnerability8.8 High
- vimVim: Arbitrary Code Execution via Netrw Menu Construction8.6 High
- gl.inet be9300, netgear be9300 firmware, mr60 +49 more +51 moreCommand injection vulnerability in certain NETGEAR Nighthawk and Orbi routers4.9 Medium
- kitty project kittyKitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences7.3 High
- firecrawlFirecrawl: Arbitrary file read via JSON Schema $ref expansion9.3 Critical
- dokployDokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE9.9 Critical
- dokployDokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE9.9 Critical
- dokployDokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution9.9 Critical
- apache rangerApache Ranger: OS Command Injection via Username in UnixUserGroupBuilder9.8 Critical
- efm iptime ax8004mEFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection6.9 Medium
- shenzhen aitemi m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection9.3 Critical
- tenda ch22Tenda CH22 CertListInfo formCertListInfo command injection8.7 High
- nighttrek ollama-mcpNightTrek Ollama-mcp index.ts command injection4.8 Medium
- nighttrek supabase-mcpNightTrek Supabase-MCP generate_types command injection4.8 Medium
- nellyw8 mcp4edaNellyW8 MCP4EDA run_openlane/view_waveform command injection4.8 Medium
- andreahaku codex mcpandreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection4.8 Medium
- mauriciomilano coder-apiMauricioMilano coder-api Projects Endpoint projects.ts createProject command injection4.8 Medium
- andreahaku llm memory mcpandreahaku llm_memory_mcp GitHooksManager.ts auto.capture command injection4.8 Medium
- adolfosalasgomez3011 slidev-builder-mcpadolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection4.8 Medium
- mimiclab mcp-pdf-visionMIMICLab mcp-pdf-vision index.ts load_pdf command injection4.8 Medium
- abdullah1854 mcpgatewayabdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection5.3 Medium
- kirachon context-engineKirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection5.1 Medium
- inquirelab mcp-bridge-apiINQUIRELAB mcp-bridge-api Servers Endpoint mcp-bridge.js command injection6.9 Medium
- hkuds nanobotHKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection5.3 Medium
- noctedefensor ludusmcpNocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection4.8 Medium
- noctedefensor ludusmcpNocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection4.8 Medium
- coding-solo godot-mcpLeeSinLiang godot-mcp create_scene/add_node index.ts executeOperation command injection4.8 Medium
- missionsquad mcp-apiMissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection5.3 Medium
- kino-kafkaesque ssh-mcp-serverKino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection4.8 Medium
- shibby tomatoShibby Tomato wanoptions sub_40F88C os command injection8.6 High
- shibby tomatoShibby Tomato qoslimit new_qoslimit_start os command injection8.6 High
- shibby tomatoShibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection8.6 High
- openhandsOpenHands send_pull_request.py initialize_repo command injection5.3 Medium
- nearai ironclawnearai ironclaw shell.rs classify_command_risk command injection5.3 Medium
- inisev backup migrationBackup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter7.2 High
- h3c nx15H3C NX15 esps repeaterproc command injection8.6 High
- h3c nx15H3C NX15 Backend RPC esps file.exec os command injection8.6 High
- h3c nx15H3C NX15 esps reload.reload_config command injection8.6 High
- Show moreLoading…