CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- edimax br-6208acEdimax BR-6208AC formWlanMP command injection10.0 Critical
- edimax br-6208acEdimax BR-6208AC formAutoFWupgrade command injection10.0 Critical
- edimax br-6208acEdimax BR-6208AC formAccept command injection6.9 Medium
- linksys e1700Linksys E1700 setLinksysIpv6 os command injection9.4 Critical
- linksys e1700Linksys E1700 setDMZ os command injection9.4 Critical
- linksys e1700Linksys E1700 Static Route addStaticRoute os command injection9.4 Critical
- agnoagno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection5.1 Medium
- trendnet tew-751dr, tew-752dru, tew733gr +2 moreTRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection10.0 Critical
- safecam x300TOZED X300 IPPingDiagnostics process_ping os command injection10.0 Critical
- openspug spugOpenSpug File Transfer transfer os command injection9.4 Critical
- brocade fabric os, broadcom fabric operating system +1 moreAn input validation vulnerability exists in the security certificate management component of the...8.5 High
- jonssonyan h-uiCVE-2026-1072029.1 Critical
- openprinting cupsCUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip3.3 Low
- No product listedThe management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not...9.8 Critical
- No product listedThe management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not...10.0 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent6.5 Medium
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API8.8 High
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Command Injection Vulnerability in the ClearPass Policy Manager Client Software8.8 High
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager9.8 Critical
- rengineyogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection5.3 Medium
- totolink x6000rTOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection10.0 Critical
- ahsay ahsaycbs, cloud backup suite +1 moreAhsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection10.0 Critical
- hkuds vibe-tradingHKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool8.7 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Arbitrary File Write through Command Injection6.6 Medium
- zosmaai pi-llm-wikizosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection9.4 Critical
- 0xshariq github-mcp-server0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection5.3 Medium
- hkuds anytoolHKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection6.9 Medium
- ziroom zhome a0101Ziroom ZHOME A0101 ping command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_time_zone command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_syslog command injection9.4 Critical
- hewlett packard enterprise (hpe) instant onAuthenticated Command Injection Vulnerabilities in HPE Networking Instant ON7.2 High
- hewlett packard enterprise (hpe) instant onUnauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol9.6 Critical
- simple-git project simple-git, steveukx git-js +1 moresimple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)8.1 High
- simple-git project simple-git, steveukx git-js +1 moresimple-git allows command execution through unblocked Git configuration includes8.1 High
- modsetter surfsenseMODSetter SurfSense MCP Connector Integration test command injection5.3 Medium
- netcore nap930Netcore NAP930 Network Tools CGI network_tools eval os command injection10.0 Critical
- raspap raspap-webguiRaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection5.3 Medium
- raspap raspap-webguiRaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection5.1 Medium
- ziroom zhome a0101Ziroom ZHOME A0101 set_passwd command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_online_client command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_online_client command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 firstSetup_wifi command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 firstLogin command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection9.4 Critical
- netcore nr289-geNetcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection10.0 Critical
- netcore nr289-geNetcore NR289-GE Location Time location_time.cgi system os command injection10.0 Critical
- netcore nr289-geNetcore NR289-GE CGI ap_ip.cgi system os command injection10.0 Critical
- aapanel baotaaaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection9.3 Critical
- aapanel baotaaaPanel BaoTa File Merge files.py merge_split_file command injection9.4 Critical
- aapanel baotaaaPanel BaoTa Database Backup database.py InputSql os command injection9.3 Critical
- Show moreLoading…