CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- netcore nbr200v2Netcore NBR200V2 Tools Ping network_tools system os command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Web Management network_tools eval os command injection10.0 Critical
- totolink n150rtTOTOLINK N150RT Web Management formWlSiteSurvey system os command injection9.4 Critical
- No product listedD-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability...8.8 High
- jhen0409 react-native-debuggerjhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection5.3 Medium
- brocade sannavUnauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service8.6 High
- moonshot ai kimi codeMoonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection5.3 Medium
- nvidia nemo speechNVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an...7.8 High
- chengdu feiyuxing technology feiyu star routerChengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection5.3 Medium
- chengdu feiyuxing technology feiyu star routerChengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection5.1 Medium
- netcore nbr200v2Netcore NBR200V2 Backup Restore restore.cgi command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection10.0 Critical
- netcore nbr200v2Netcore NBR200V2 LAN IP Configuration network_tools command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection9.4 Critical
- 0-gaurav-0 nexus-mcp0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection5.3 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps Command services.py generate_host_task command injection5.1 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection5.1 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection5.1 Medium
- d-link r95D-Link R95 DHMAPI ssi system os command injection9.4 Critical
- totolink a3002muTotolink A3002MU formWsc command injection9.4 Critical
- spatie scottyspatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection5.3 Medium
- marcopiovanello yt-dlp-web-uimarcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection6.9 Medium
- No product listedNUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.8.8 High
- microsoft 365 copilot's business chat, 365 copilot chat +1 moreMicrosoft 365 Copilot Business Chat Information Disclosure Vulnerability8.6 High
- microsoft 365 copilotMicrosoft 365 Copilot Elevation of Privilege Vulnerability9.9 Critical
- microsoft copilotMicrosoft Copilot Information Disclosure Vulnerability6.1 Medium
- webrecorder browsertrixBrowsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors9.4 Critical
- dromara mayfly-goDromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection5.3 Medium
- cisco identity services engine softwareCisco Identity Services Engine Remote Code Execution Vulnerability9.1 Critical
- cisco nexus dashboardCisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command9.9 Critical
- ruijie rg-ew3000gxRuijie RG-EW3000GX user_list_note admin os command injection9.4 Critical
- ruijie rg-ew3000gxRuijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection9.4 Critical
- arista networks eosSecurity Advisory 01658.6 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways6.5 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways9.1 Critical
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab8.5 High
- totolink x5000rTOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection5.3 Medium
- d-link dsl-3782D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection5.3 Medium
- efm iptime c200eEFM ipTIME C200E System Setup iux_set.cgi os command injection9.4 Critical
- sabyasachirana webmapSabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection6.9 Medium
- magicblack maccms10magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection5.1 Medium
- d-link dwr-m921D-Link DWR-M921 formWsc os command injection5.1 Medium
- d-link dwr-m921D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection5.1 Medium
- d-link dwr-m921D-Link DWR-M921 formDiskPartition system command injection5.1 Medium
- d-link dwr-m921D-Link DWR-M921 formDiskCreateShare system os command injection9.4 Critical
- d-link dwr-m921D-Link DWR-M921 formDiskFormat system os command injection9.4 Critical
- d-link dwr-m920D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection9.4 Critical
- 0x4m4 hexstrike ai0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection6.9 Medium
- ipa-lab hackingbuddygptipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection5.3 Medium
- Show moreLoading…