CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- dynaconfdynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver7.5 High
- danvei233 xiaoheifsxiaoheiFS Vulnerable to RCE via Unrestricted Plugin Installation (Manifest Manipulation)7.2 High
- No product listedA command injection vulnerability exists in the web management interface of the WiFi Extender...9.8 Critical
- roxy-wiRoxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE8.8 High
- angeet es3 kvm, es3 kvm firmware +1 moreAngeet ES3 KVM OS command injection8.5 High
- perle systems iolan sts, iolan scs +1 morePerle IOLAN STS/SCS Authenticated Command Injection via 'shell ps'8.6 High
- openclawOpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP9.2 Critical
- tenda ac8, ac8 firmware +1 moreTenda AC8 Web UploadCfg route_set_user_policy_rule os command injection5.1 Medium
- nicolargo glancesGlances has a Command Injection via Process Names in Action Command Templates7.0 High
- litespeed technologies lsws enterprise, openlitespeed, litespeedtech litespeed web server +2 moreOpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command...8.6 High
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreCommand Injection in mlflow/mlflow7.5 High
- topsec topacmTopsec TopACM HTTP Request nmc_sync.php os command injection9.3 Critical
- tp link systems inc. tl-wr840n v6, tp-link systems inc. tl-wr802n v4, tl-wr841n v14 +3 more +5 moreAuthenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N8.5 High
- claude-hovercraftclaude-hovercraft executeClaudeCode Command Injection Remote Code Execution Vulnerability9.8 Critical
- gvectors wpdiscuzwpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag5.1 Medium
- denoCommand Injection via incomplete shell metacharacter blocklist in node:child_process (bypass of CVE-2026-27190 fix)8.1 High
- tp-link systems inc. tl-mr6400 v5.3, tp-link tl-mr6400 firmware +1 moreCommand Injection Vulnerability in Telnet CLI on TP-Link TL-MR64008.5 High
- canonical lxdAuthenticated RCE via unsanitized compression_algorithm9.4 Critical
- No product listedOpenAkita Chat API Endpoint shell.py run os command injection4.8 Medium
- 0xkoda wiremcp0xKoda WireMCP Tshark CLI index.js server.tool os command injection4.8 Medium
- anysphere cursorCursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass8.7 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software CLI Privilege Escalation Vulnerability8.8 High
- qnap qts, quts hero +1 moreQTS, QuTS hero2.0 Low
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection found in admin AOS-CX CLI command7.2 High
- cloudcli cloud cli, siteboon claudecodeui +1 moreCloud CLI WebSocket shell injection8.7 High
- cloudcli cloud cli, siteboon claudecodeui +1 moreCloud CLI has Command Injection via Multiple Parameters9.1 Critical
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 moreLantronix EDS3000PS Unverified Password Change5.1 Medium
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 moreLantronix EDS3000PS OS Command Injection8.6 High
- lantronix eds5000, e210 series, e213f102s firmware +36 more +38 moreLantronix EDS5000, G520, and X300 OS Command Injection9.3 Critical
- lantronix eds5000 series, eds5008 firmware, eds5016 firmware +3 more +5 moreLantronix EDS5000, G520, and X300 OS Command Injection8.6 High
- lantronix eds5000 series, eds5008 firmware, eds5016 firmware +3 more +5 moreLantronix EDS5000, G520, and X300 OS Command Injection8.6 High
- lantronix eds5000 series, eds5008 firmware, eds5016 firmware +1 more +3 moreLantronix EDS5000 OS Command Injection8.6 High
- lantronix eds5000 series, eds5008 firmware, eds5016 firmware +3 more +5 moreLantronix EDS5000, G520, and X300 OS Command Injection8.6 High
- simple-git project simple-git, red hat logging subsystem for red hat openshift, enterprise linux 8 +4 more +6 moresimple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE9.8 Critical
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection')...6.7 Medium
- fortinet fortisandbox cloud, fortisandbox paas +1 moreAn improper neutralization of special elements used in an os command ('os command injection')...6.7 Medium
- janitza umg 96rm-e 230v(5222062), umg 96rm-e 24v(5222063), weidmueller energy meter 750-230 (2540910000) +1 more +3 moreCommand injection in power analyzer via Modbus-TCP and Modbus-RTU9.8 Critical
- ghosttyGhostty affected by arbitrary command execution via control characters in paste and drag-and-drop operations6.3 Medium
- budibaseBudibase has a Command Injection in PostgreSQL Dump Command8.6 High
- tp-link systems inc. archer axe75 v1.6/v1.0, tp-link archer axe75 firmware +1 moreCommand Injection Vulnerability on TP-Link Archer AXE758.5 High
- linagora twakeAn issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command...9.8 Critical
- totolink n300rh, n300rh firmware +1 moreTotolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection6.9 Medium
- tencent weknoraWeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation10.0 Critical
- anhui seeker electronic technology co., ltd. xikestor sks8310-8x, seekswan zikestor sks8310-8x firmware +1 moreXikeStor SKS8310-8X PingTestSet Command Injection9.3 Critical
- github copilot-cli, copilot command line interface +1 moreGitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution7.5 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints8.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration7.5 High
zeptoclawcrates.iozeptoclaw has Android device shell blocklist bypass via argument permutation7.5 High- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +1 more +3 moreCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability6.0 Medium
- 2n access commanderOS Command Injection over API8.8 High
- Show moreLoading…