CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- apioo fusioApioo Fusio - Remote Code Execution8.8 High
- sap se netweaver application server abap and abap platformOS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform5.5 Medium
- tp-link systems inc. eb210 pro(eu1) 1.0, eb210 pro(us1) 1.0, eb810v(eu1) v1.0 +28 more +30 moreOS Command Injection in Web Interface in Multiple TP-Link Aginet Devices8.6 High
- firecrawlFirecrawl: Arbitrary file read via JSON Schema $ref expansion9.3 Critical
- dokployDokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById9.9 Critical
- dokployDokploy: Remote Code Execution via volume-backup9.9 Critical
- dokployDokploy: Authenticated Command Injection in Dokploy Dockerfile Builder0.0 None
- dokployDokploy: Command Injection via Compose Custom Command8.7 High
- dokployDokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers9.9 Critical
- dokployDokploy: Command Injection via database credentials in backup/restore commands6.4 Medium
- dokployDokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`9.9 Critical
- dokployDokploy: Command Injection via Registry Credentials in Swarm Upload9.4 Critical
- dokployDokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments9.6 Critical
- dokployDokploy: Command Injection via dockerImage in buildRemoteDocker9.6 Critical
- dokployDokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*9.9 Critical
- dokployDokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile8.8 High
- dokployDokploy: Command Injection via Unescaped Git URL in Clone Commands8.7 High
- cyberpanelCyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer8.7 High
- dokployDokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`9.9 Critical
- dokployDokploy: Command Injection via Docker Credentials in buildRemoteDocker8.7 High
- dokployDokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE9.9 Critical
- dokployDokploy: Member-role RCE as host root via destination.testConnection rclone shell injection9.9 Critical
- dokployDokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)9.9 Critical
- dokployDokploy: OS Command Injection via compose `composePath`9.9 Critical
- dokployDokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE9.9 Critical
- dokployDokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`9.9 Critical
- dokployDokploy: Command Injection via Compose Shell Execution6.5 Medium
- dokployDokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter9.9 Critical
- dokployDokploy: OS Command Injection via `databaseName` / `backupFile` in database restore9.9 Critical
- zyxel networks wah7601Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection9.8 Critical
- alseambusher crontab-uialseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field9.8 Critical
- duhow xiaoai-patchduhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints9.8 Critical
- nasa hypercpNASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server7.5 High
- 4xmen pm2panel4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter8.8 High
- efm iptime ax8004mEFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection6.9 Medium
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via openvpn function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via macfilter9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via porTrigger function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via portFw function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via alg function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via dmz Function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via urlfilter9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via wps.cgi9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via app.cgi9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formWsc9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Command Injection via /boafrm/formNtp9.3 Critical
- Show moreLoading…