CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- shibby tomatoShibby Tomato start_jffs2 sub_2D568 os command injection5.3 Medium
- wavlink wl-nu516u1Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection5.3 Medium
- comfast cf-wr631ax v3Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection9.3 Critical
- soniccloudorg sonic-agentSonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection5.3 Medium
- soniccloudorg sonic-agentSonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection5.3 Medium
- trendnet tew-821dapTRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection5.3 Medium
- trendnet tew-821dapTRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection5.3 Medium
- trendnet tew-821dapTRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection5.3 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Arbitrary File Write and Command Execution9.4 Critical
- hestiacp, hestiacp control panel +1 moreHestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Management8.7 High
- 1panel-dev maxkbMaxKB MCP tool import validation bypass allows post-authentication remote code execution8.8 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Allowlist Bypass via find -exec8.7 High
- dell powerflex managerDell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of...9.1 Critical
- papermerge dmsOS Command Injection in R-SOFT DMS9.0 Critical
- papermerge dmsOS Command Injection in R-SOFT DMS8.7 High
- stefanzweifel laravel-backup-restorewnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injec…8.0 High
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Command Injection in CLI6.0 Medium
- discourseDiscourse: Remote code execution via pdf uploads7.5 High
- coollabsio coolifyCoolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution8.8 High
- ruvnet rufloRuflo: Unauthenticated RCE in MCP bridge default docker-compose deployment10.0 Critical
- hoppscotchHoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injection7.2 High
- aidanpark openclaw-androidAidanPark openclaw-android Android WebView Bridge JsBridge.kt os command injection4.8 Medium
- gpsdgpsd gpsprof Command Injection via gnuplot plot title subtype field8.4 High
- cloudfoundry bosh cliBOSH CLI Shell Injection7.1 High
- nuclioNuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE8.0 High
- horde vfsHorde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver7.7 High
- tooljetToolJet GitHub Actions comment body shell injection exposes deployment secrets4.7 Medium
- bentoml openllmbentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection4.8 Medium
- christopherthielen check-peer-dependencieschristopherthielen check-peer-dependencies peerDependencies packageUtils.js shelljs.exec os command injection5.3 Medium
- cisco rv110w firmware, rv130 firmware, rv130w firmware +2 moreAn OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in...7.2 High
- cisco rv110w firmware, rv130 firmware, rv130w firmware +2 moreAn OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in...7.2 High
- cisco rv110w firmware, rv130 firmware, rv130w firmware +2 moreAn OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd"...7.2 High
- cisco rv110w firmware, rv130 firmware, rv130w firmware +2 moreAn OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary...7.2 High
- dell data domain operating system, powerprotect data domain +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...7.2 High
- egroupwareAuthenticated RCE via Malicious eTemplate Upload in EGroupware8.6 High
- coollabsio coolifyCoolify: OS Command Injection via Database Credential Fields in Docker Compose Service Commands3.3 Low
- coollabsio coolifyCoolify: Command injection via single-quote breakout in Docker Compose custom commands8.8 High
- coollabsio coolifyCoolify: Authenticated Remote Code Execution via Command Injection in Database Import Container Name8.8 High
- coollabsio coolifyCoolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers8.8 High
- coollabsio coolifyCoolify: Command Injection via Newline in Pre/Post Deployment Commands (Heredoc Transport)8.8 High
- coollabsio coolifyCoolify: Authenticated Host-Level RCE via Unescaped Database Credentials in Backup Jobs3.3 Low
- coollabsio coolifyCoolify: Host RCE via Sentinel token injection8.8 High
- coollabsio coolifyCoolify: Command injection via unsanitized persistent storage name in docker volume commands8.8 High
- coollabsio coolifyCoolify: OS Command Injection via Unmanaged Container Operations - Remote Code Execution8.8 High
- coollabsio coolifyCoolify: Host RCE via Log Drain secret/env command injection8.8 High
- coollabsio coolifyCoolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container8.8 High
- coollabsio coolifyCoolify: Command Injection via unsanitized MongoDB collection names in database backup3.3 Low
- coollabsio coolifyCoolify: Authenticated Remote Code Execution in GetLogs Livewire Component8.8 High
- coollabsio coolifyCoolify: Authenticated RCE via SHELL_SAFE_COMMAND_PATTERN regression → host root8.8 High
- coollabsio coolifyCoolify: Command Injection via Unescaped Version String in Docker Build3.8 Low
- Show moreLoading…