CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI6.1 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +23 more +25 moreDracut: dracut: root code execution via dhcp options command injection7.5 High
- anthropics claude-code-actionClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration5.3 Medium
- aws cloud development kit libraryOS Command Injection in NodejsFunction Bundling in aws-cdk-lib7.0 High
- tp link systems inc. archer ax17 v1, tp-link systems inc. archer ax12 v1, archer ax1300 v1.6 +1 more +3 moreCommand Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers8.5 High
- suse wickedindirect remote shell command injection via unsanitized DHCP options in wicked8.8 High
- roxy-wiRoxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /config/versions/.../save)8.8 High
- roxy-wiRoxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section save9.9 Critical
- roxy-wiRoxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`9.9 Critical
- qnap qts, quts hero +1 moreQTS, QuTS hero6.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero8.6 High
- qnap qts, quts hero +1 moreQTS, QuTS hero8.6 High
- qnap qts, quts hero +1 moreQTS, QuTS hero8.6 High
- pheditorPheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)9.9 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.311 RCE via Git Configuration Injection8.7 High
- ivanti endpoint manager mobileAn OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2...7.2 High
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper neutralization of special elements used in an os command ('os command injection')...9.1 Critical
- ivanti sentry, standalone sentry +1 moreAn OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1...10.0 Critical
- logseqShell command injection in Logseq8.7 High
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The...8.7 High
degitnpmdegit has a Command Injection issue8.7 High- No product listedDedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.9.8 Critical
- nginxproxymanager nginx-proxy-managerNginx Proxy Manager Authenticated RCE via setupCertbotPlugins()7.7 High
- devolutions serverImproper neutralization of special elements in the built-in PAM provider password rotation...6.5 Medium
- tenda f451Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection8.7 High
- tp-link systems inc. archer mr600 v2, archer mr600 v3, archer mr600 v5 +2 moreCommand Injection in Archer MR600 WireGuard Client Configuration8.5 High
- openbullet openbullet2OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload8.7 High
- rclone, red hat cryostat 4, openshift api for data protection +1 more +3 moreRclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix9.8 Critical
- vertex-app vertexvertex-app vertex Log Viewer Endpoint LogMod.js os command injection5.3 Medium
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW UI Arbitrary Command Execution7.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection7.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Reports Application Insecure Input Validation7.0 High
- buffalo open xdmod, ubccr xdmod +1 moreOpen XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection9.3 Critical
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection7.0 High
- haxtheweb haxcms-phpHAX CMS Vulnerable to Command Injection using Git.php7.7 High
- haxtheweb haxcms-nodejs, haxcms-php +1 moreAuthenticated Remote Code Execution via File Overwrite9.4 Critical
- termixTermix Vulnerable to Arbitrary Command Execution in File Manager9.0 Critical
- termixTermix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection9.8 Critical
- termixTermix has an OS Command Injection in File Manager resolvePath endpoint9.9 Critical
- shd101wyy markdown preview enhancedMarkdown Preview Enhanced OS Command Injection in External File and Link Opening8.6 High
- d-link dwr-m920D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection5.3 Medium
- dbgateDbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection9.4 Critical
- imagemagickImageMagick: Policy Bypass can read disallowed files5.5 Medium
- hclsoftware digital experience, hcltech digital experience compose +1 moreHCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API8.7 High
- shibby tomatoShibby Tomato Web UI rstats rstats_path os command injection8.6 High
- shibby tomatoShibby Tomato Web UI rc start_vpnserver os command injection8.6 High
- shibby tomatoShibby Tomato Web UI rc start_6rd_tunnel os command injection8.6 High
- shibby tomatoShibby Tomato Web UI rc start_dhcpc os command injection8.6 High
- nvm-sh nvm, openjsf node version manager +1 morenvm executes commands from a malicious Node.js mirror's version strings7.5 High
- gx india earth 1010, earth 2022 +1 moreCommand Injection Vulnerability in GX Earth ONT Models8.7 High
- Show moreLoading…