CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dns-320l, dns-327l, dns-340l +1 more +3 moreD-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection9.4 Critical
- d-link dns-340l, dns-345 +1 moreD-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection9.4 Critical
- diem-project diemdiem-project diem Administrative Console actions.class.php executeCommand os command injection5.1 Medium
- klaussilveira gitlistklaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection6.9 Medium
- totolink nr1800xTOTOLINK NR1800X cstecgi.cgi setUssd command injection5.3 Medium
- d-link dir-825mD-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection5.3 Medium
- No product listedA command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1...8.1 High
- alexgladkov claude-in-mobileAlexGladkov claude-in-mobile client.ts execSync os command injection4.8 Medium
- No product listedAn issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content...4.3 Medium
- No product listedAn issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges...8.8 High
- totolink n600rTOTOLINK N600R cstecgi.cgi getCurrentTime command injection6.9 Medium
- zackees transcribe-anythingzackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection6.3 Medium
- nvidia unified fabric manager enterprise - ga, unified fabric manager enterprise - lts 2023, unified fabric manager enterprise - lts 2024 +1 more +3 moreNVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated...6.8 Medium
- nvidia unified fabric manager enterprise - ga, unified fabric manager enterprise - lts 2023, unified fabric manager enterprise - lts 2024 +1 more +3 moreNVIDIA UFM Enterprise contains a vulnerability in the user management component, where an...6.8 Medium
- nvidia unified fabric manager enterprise - ga, unified fabric manager enterprise - lts 2023, unified fabric manager enterprise - lts 2024 +1 more +3 moreNVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an...8.0 High
- fishcodetech mutekiFishCodeTech Muteki Default Local Worker Backend settings.json os command injection5.3 Medium
- sworddut mcp-ffmpeg-helpersworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection4.8 Medium
- tanstack devtools-viteTanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection2.0 Low
- No product listedD-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter...8.1 High
- tenda ch22Tenda CH22 exeCommand formexeCommand command injection5.3 Medium
- tenda ch22Tenda CH22 editFileName formeditFileName command injection5.3 Medium
- trendnet tew-823druTRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection5.1 Medium
- trendnet tew-821dapTRENDnet TEW-821DAP ssi upload.cgi command injection5.3 Medium
- comfast cf-n1-sComfast CF-N1-S mbox-config system command injection9.4 Critical
- cloud foundry foundation bosh cliCVE-2026-47827 – BOSH CLI Powershell Injection7.5 High
- apache cloudstackApache CloudStack: Get and Run Diagnostics Command Injection8.8 High
- tenda ch22Tenda CH22 formcreateFileName command injection5.3 Medium
- comfast cf-n1-sComfast CF-N1-S mbox-config sprintf command injection5.3 Medium
- chenhg5 cc-connectchenhg5 cc-connect Management API engine.go shellExecCommand os command injection6.9 Medium
- trendnet tew-755apTRENDnet TEW-755AP ssi email.cgi log_email_server command injection5.3 Medium
- splunk, splunk enterprise +1 moreSPL Injection through the geostats Command in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web in Splunk Enterprise6.7 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Nearby Event Searches in Splunk Enterprise7.3 High
- trendnet tv-ip751wicTRENDnet TV-IP751WIC alphapd set_time.cgi command injection5.3 Medium
- trendnet tew-821dapTRENDnet TEW-821DAP ssi ping.cgi system command injection5.3 Medium
- asus routerTRENDnet Router ping.cgi command injection5.3 Medium
- trendnet tew-823druTRENDnet TEW-823DRU admin.cgi command injection5.3 Medium
- librenmsLibreNMS before 26.5.0 Remote Code Execution via AboutController8.7 High
- librenmsLibreNMS: Remote Code Execution by Signal Alert Transportation Module8.6 High
- microsoft copilot, copilot web +1 moreMicrosoft Copilot Information Disclosure Vulnerability8.8 High
- comfast cf-n1-sCOMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection9.4 Critical
- kylecui netforensicmcpkylecui NetForensicMCP index.js execAsync command injection5.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content...3.6 Low
- bulwarkmail webmailIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to...5.4 Medium
- bulwarkmail webmailIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead...4.3 Medium
- bulwarkmail webmailIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count...7.1 High
- belkin ax1800, gl.inet a1300, axt1800 +5 more +7 moreGL.iNet XE3000 NAS Command Service gl_nas_sys os command injection6.9 Medium
- gl.inet be9300, mt6000 +1 moreGL.iNet BE9300/MT6000 Firewall-management RPC os command injection5.3 Medium
- belkin ax1800, gl.inet a1300, axt1800 +14 more +16 moreGL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection5.3 Medium
- jiantao88 android-mcp-serverjiantao88 android-mcp-server Command Execution index.js child_process.exec os command injection4.8 Medium
- Show moreLoading…