CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formSmsManage9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel9.3 Critical
- shopify ruby-lspWorkspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension5.4 Medium
- hkuds nanobotHKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection5.3 Medium
- 0x5t4l1n nextor ip changerNexTOR IP Changer Unsafely Uses sudo and shell=True7.3 High
- 0x5t4l1n nextor ip changerNexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 extended lifecycle support - extension +25 more +27 moreDracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()7.5 High
- phpcsstandards php codesnifferPHP_CodeSniffer gitblame report command injection via crafted filename7.3 High
- thephpleague commonmarkLeague CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass5.3 Medium
- wgdashboardWGDashboard Remote Code Execution vulnerability9.8 Critical
- nuxsmin syspasssysPass FileBackupService Authenticated OS Command Injection via Backup Path8.6 High
- bohdan triapitsyn openchamberOpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec9.3 Critical
- dell virtual storage integrator for vmware vsphere client, virtual storage integrator +1 moreDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s...9.8 Critical
- shibby tomatoShibby Tomato wanoptions sub_40F88C os command injection8.6 High
- shibby tomatoShibby Tomato qoslimit new_qoslimit_start os command injection8.6 High
- shibby tomatoShibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection8.6 High
- rclonerclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution8.0 High
- livebookUnescaped deployment environment variables in generated setup commands5.0 Medium
- electronElectron: DevTools embedder handler executes arbitrary files via shell open6.9 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by OS Command Injection in Model Context Protocol features7.2 High
- ibm langflow oss, langflow +1 moreLangflow is affected OS Command Injection in Model Context Protocol features8.8 High
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar SIEM is vulnerable to remote code execution by privileged users4.7 Medium
- fledge-iot fledgeFledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename7.2 High
- swiss federal office of information technology, systems and telecommunication @oblique/cliCommand Injection in @oblique/cli7.8 High
- adaltas backmeupbackmeup (npm) - OS Command Injection via Backup Option Values8.8 High
- hashbrowncms hashbrown-cmsHashBrown CMS - OS Command Injection via Git Deployer Branch Field8.8 High
- hashbrowncms hashbrown-cmsHashBrown CMS - OS Command Injection in Media Upload Thumbnail Generation8.8 High
- h3c nx15H3C NX15 Backend RPC esps file.exec os command injection8.6 High
- cjcollier google::authGoogle::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call9.8 Critical
- lenovo xclarity orchestratorRemote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator8.7 High
- zyxel wax650s firmwareA post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel...7.2 High
- sangfor operation and maintenance security management systemSangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection6.9 Medium
- clearfoundation clearosClearOS 7.9 OS Command Injection via Log Viewer filter parameter8.6 High
- telenia software tvoxTelenia TVox 26.5.3 OS Command Injection via action_audio.php8.6 High
- openwrt luciOpenWrt luci-app-dockerman Read ACL Remote Code Execution8.7 High
- wavlink wl-nu516u1Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection5.3 Medium
- wavlink wl-nu516u1Wavlink WL-NU516U1 Config Import os command injection7.7 High
- No product listedAn OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1...9.8 Critical
- No product listedThe "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user...9.8 Critical
- wazuhWazuh GitHub Actions Shell Injection via Fork Pull Request9.3 Critical
- tp-link systems inc. axe75 v1, tp-link archer axe75 firmware +1 moreCommand Injection Vulnerability in OpenVPN of TP-Link Archer AXE758.5 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)9.4 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution7.7 High
- Show moreLoading…