CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- n8nn8n before 1.123.69 Remote Code Execution via Git Node Configuration Values7.7 High
- n8nn8n before 1.123.69 Arbitrary File Read and Write via Snowflake8.7 High
- chenhg5 cc-connectchenhg5 cc-connect Management API engine.go shellExecCommand os command injection6.9 Medium
- tp-link systems inc. archer c20 v6, tp-link archer c20 firmware +1 moreCommand Injection in Router Web Management Interface8.5 High
- termix-ssh termixTermix: Remote Code Execution via Tunnel Disconnect pkill Command Injection9.8 Critical
- termix-ssh termixTermix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- wekanWekan:hell Injection in External Antivirus Scanner Path via asyncExec7.7 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.9 Critical
- dell recoverpoint for virtual machinesDell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of...7.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.9 Critical
- shenzhen cudy technology co., ltd. wr3000 2.0Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler8.7 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of...8.8 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of...7.2 High
- jarun nnnShell Command Injection in nnn5.1 Medium
- jarun nnnShell Command Injection in nnn5.1 Medium
- truelockmc streambertStreambert: Arbitrary File Execution via VLC/mpv Launcher Fallback8.8 High
- librenmsLibreNMS before 26.5.0 Remote Code Execution via AboutController8.7 High
- ha-china blueprint-studioBlueprint Studio Git credential helper command injection8.6 High
- project-monai monaiMONAI before 1.6.0 OS Command Injection via dataset_name_or_id8.6 High
- super-productivitySuper Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist7.8 High
- pyenvPyenv: Glob/wildcard metacharacters bypass is_version_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual)2.0 Low
- comfast cf-n1-sCOMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection9.4 Critical
- notepad-plus-plusNotepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution5.4 Medium
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem9.1 Critical
gitlab.com/uniget-org/cliGouniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set7.8 High- nicolargo glancesGlances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)7.1 High
- nicolargo glancesGlances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection8.8 High
- nicolargo glancesGlances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction8.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible7.8 High
- openshift-metal3 fakefishUser-controlled variables inserted unescaped into shell scripts and Kubernetes manifests7.7 High
- dell objectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special...7.3 High
- wktk conflibotConflibot: Command injection via crafted pull request branch names under pull_request_target9.1 Critical
- dell objectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special...7.8 High
- dell objectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special...7.8 High
- bulwarkmail webmailIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk...8.8 High
- siyuan-note siyuanSiYuan before 3.7.4 Local Privilege Escalation via elevator.exe8.6 High
- belkin ax1800, gl.inet a1300, axt1800 +5 more +7 moreGL.iNet XE3000 NAS Command Service gl_nas_sys os command injection6.9 Medium
- gl.inet be9300, mt6000 +1 moreGL.iNet BE9300/MT6000 Firewall-management RPC os command injection5.3 Medium
- belkin ax1800, gl.inet a1300, axt1800 +14 more +16 moreGL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection5.3 Medium
- jiantao88 android-mcp-serverjiantao88 android-mcp-server Command Execution index.js child_process.exec os command injection4.8 Medium
- No product listedAn issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via...9.8 Critical
- ooples token-optimizer-mcpToken Optimizer MCP: OS command injection in smart_user via username in get-user-info8.4 High
- cockpit cmsCockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename8.7 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.9 Critical
- Show moreLoading…