By weakness (CWE)

CWE-78: related vulnerabilities

CVEs classified under CWE-78. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

177 published vulnerabilities · page 1 of 2

• CVE-2026-11556HIGH 8.8

  Tenda F451 wireless routers running firmware versions 1.0.0.7 or 1.0.0.9 contain a command injection vulnerability in their web management interface. An authenticated attacker can craft malicious input to the MAC address field in the WriteFacMac function, allowing them to execute arbitrary operating system commands on the device. The vulnerability requires login credentials but poses a serious risk because successful exploitation grants full control over the router, potentially compromising all network traffic and devices connected to it.

• CVE-2026-11572HIGH 8.8

  Degit, a popular tool for cloning Git repositories, contains a command injection vulnerability that allows attackers to run arbitrary system commands on machines using vulnerable versions. The flaw exists because the application doesn't properly validate repository names before passing them to shell commands. An attacker only needs to trick a user into cloning from a malicious repository URL to gain code execution with the privileges of the process running degit.

• CVE-2026-12161HIGH 8.8

  A vulnerability in Devolutions Remote Desktop Manager's SSH Elevate Shell feature allows authenticated users to bypass input validation and execute arbitrary commands on remote SSH hosts. An attacker with permission to create or modify shared SSH entries can craft a malicious alternate username that, when combined with user interaction to trigger the Elevate Shell action, will execute unauthorized commands using the stored elevation credentials. This is a post-authentication attack that leverages credential misuse within the application's own features.

• CVE-2026-13545HIGH 8.8

  D-Link DCS-935L network cameras running firmware version 1.10.01 contain a critical flaw in their web configuration interface. An authenticated attacker can inject arbitrary operating system commands through the UID parameter in the setconf.cgi handler, gaining the ability to execute code with the privileges of the camera process. Because the vulnerability requires authentication but offers full system compromise once inside, it represents a high-severity risk for organizations relying on these devices for surveillance infrastructure.

• CVE-2026-21837HIGH 8.8

  HCL Digital Experience contains an OS command injection flaw in its Digital Asset Management API that allows authenticated attackers to run arbitrary commands on the underlying system. Because the API typically executes with application-level privileges, successful exploitation could grant an attacker a foothold to pivot deeper into your infrastructure or exfiltrate sensitive data. This is a post-authentication vulnerability, meaning an attacker needs valid credentials to exploit it.

• CVE-2026-25855HIGH 8.8

  OpenBullet2 versions up to 0.3.2 contain a critical flaw that allows logged-in users to run arbitrary commands on servers hosting the application. By uploading malicious script files through the FileProxySource feature—which is meant to load proxy configurations—attackers can trick the server into executing those scripts. The server then processes the output and returns it as proxy data, effectively giving the attacker command-line control over the machine running OpenBullet2. This vulnerability requires prior authentication but poses severe risk once an attacker gains initial access.

• CVE-2026-27957HIGH 8.8

  Coolify, an open-source platform for managing servers and applications, contains a command injection flaw in its certificate management feature that allows any authenticated user to run arbitrary system commands on managed servers. Because Coolify typically runs with elevated privileges (root or docker group membership), successful exploitation grants complete control over the server and all its containerized applications. The vulnerability affects all versions before 4.0.0-beta.464.

• CVE-2026-32833HIGH 8.8

  The Cudy LT300 router running firmware versions before 2.5.12 contains a command injection flaw in its time-configuration interface. An attacker who has gained valid credentials to the device can inject shell commands through the NTP settings, allowing them to execute arbitrary code with system privileges. This transforms a low-barrier authenticated access point into a full device compromise.

• CVE-2026-34034HIGH 8.8

  Coolify, a popular open-source platform for managing servers, applications, and databases, contains a command injection vulnerability in how it handles the Sentinel token setting. An authenticated user with access to server Sentinel configuration can inject malicious shell commands that execute with full privileges on the host system when Sentinel restarts. The vulnerability affects all versions prior to 4.0.0-beta.466 and requires both authentication and access to Sentinel settings, but poses a significant risk to self-hosted deployments where administrators may grant broad access to trusted team members.

• CVE-2026-34035HIGH 8.8

  Coolify, an open-source platform for managing servers and applications, contains a command injection vulnerability in its log drain feature. Authenticated users can inject arbitrary shell commands by manipulating log drain secrets and environment variables, which are not properly encoded before being executed on the host system. This affects all versions before 4.0.0-beta.466. An attacker with valid Coolify credentials can achieve full compromise of the underlying server.

• CVE-2026-34057HIGH 8.8

  Coolify, a self-hosted application deployment and infrastructure management platform, contains a command injection vulnerability in its database import feature. An authenticated user can inject arbitrary shell commands by manipulating the container name during database import operations, potentially gaining full control over the underlying system. The vulnerability exists because user-supplied input is passed directly to shell commands without sanitization or validation. This has been fixed in version 4.0.0-beta.471.

• CVE-2026-34058HIGH 8.8

  Coolify, an open-source server and application management platform, contains a command injection vulnerability in its web interface that allows authenticated users to execute arbitrary system commands on managed servers. The vulnerability exists in the Server Resources component where user-supplied container IDs are passed directly into SSH commands without proper validation. Any team member with access to Coolify can exploit this to run unauthorized commands with the privileges of the Coolify service account on remote systems. This is fixed in version 4.0.0-beta.471.

• CVE-2026-34152HIGH 8.8

  Coolify is a popular open-source platform for deploying and managing servers, applications, and databases. A vulnerability in versions before 4.0.0-beta.471 allows authenticated users to break out of the intended command scope during deployment by injecting additional shell commands. The flaw exists because deployment commands are inadequately escaped when transmitted via SSH, specifically through a mechanism called heredoc that preserves newlines rather than blocking them. An attacker with valid credentials can inject arbitrary commands that execute with the privileges of the deployment process on target servers.

• CVE-2026-34153HIGH 8.8

  Coolify, a popular open-source server and application management platform, contains a command injection vulnerability in its file storage feature. An authenticated user with permission to add file storage can execute arbitrary system commands on the server by providing a specially crafted file path. The vulnerability exists because the application builds shell commands before properly validating user input. Upgrading to version 4.0.0-beta.471 or later fixes this issue.

• CVE-2026-34158HIGH 8.8

  Coolify, a popular self-hosted deployment and infrastructure management tool, contains a command injection vulnerability in how it processes custom Docker build and startup commands. An authenticated attacker with settings-modification permissions can inject shell metacharacters into deployment configuration fields, causing arbitrary code to execute directly on the host system—bypassing the Docker container sandbox intended to isolate workloads. This is a post-authentication attack requiring existing application access, but the impact is severe: full system compromise during deployments.

• CVE-2026-34168HIGH 8.8

  Coolify, an open-source platform for managing servers and applications, contains a command injection vulnerability in how it handles storage volume names. An authenticated user can inject shell commands into a volume name field, and those commands execute with server privileges when the volume is deleted. This requires an attacker to already have valid credentials to the Coolify instance, but the impact is severe—full command execution on managed infrastructure. The vulnerability was patched in version 4.0.0-beta.471.

• CVE-2026-34594HIGH 8.8

  Coolify, a popular open-source platform for managing servers, applications, and databases, contains a command injection flaw in its Destination Network Management feature. An authenticated user with permission to manage destinations can inject arbitrary shell commands into network configuration parameters, resulting in uncontrolled code execution as root on any managed server. The vulnerability exists in all versions prior to 4.0.0-beta.471 and has been patched in that release.

• CVE-2026-34597HIGH 8.8

  Coolify, a self-hosted platform for managing servers, applications, and databases, contains a critical flaw in how it processes build configuration parameters. When users specify custom installation commands for Nixpacks builds, Coolify fails to safely isolate these inputs before executing them on the deployment host. An authenticated attacker can craft a malicious install_command that breaks out of the intended build sandbox and runs arbitrary commands with the full privileges of the host system. This is a post-authentication vulnerability—the attacker must have valid Coolify credentials—but once authenticated, the risk is severe because successful exploitation grants complete host compromise during the deployment phase.

• CVE-2026-34599HIGH 8.8

  Coolify, an open-source server and application management platform, contains a vulnerability that allows authenticated team members to run arbitrary commands with root privileges on managed servers. The flaw exists in the GetLogs component, where user-supplied input is passed unsanitized into system commands. Any user with basic team membership can exploit this to gain complete control over infrastructure managed by Coolify.

• CVE-2026-35018HIGH 8.8

  NetComm NF20MESH routers contain a critical flaw that allows someone with login credentials to run arbitrary commands with full system privileges. The vulnerability stems from improper handling of usernames during account creation—attackers can inject shell commands into the username field, and the router will execute them without restriction. This is a post-authentication attack, meaning an attacker must first obtain valid credentials, but once inside, they gain complete control of the device.

• CVE-2026-42143HIGH 8.8

  Coolify, a popular open-source platform for managing servers and applications, contains a critical vulnerability in versions before 4.0.0-beta.471 that allows authenticated users to run arbitrary commands with root privileges. The flaw exists because user-supplied persistent volume names are directly embedded into system commands without proper validation or escaping. An attacker with valid access to Coolify could craft a malicious volume name containing shell commands, which would execute with elevated privileges when volume operations are triggered. This represents a significant privilege escalation risk for any organization self-hosting Coolify.

• CVE-2026-42153HIGH 8.8

  Coolify, an open-source platform for managing servers, applications, and databases, contains a command injection vulnerability in its PostgreSQL health check functionality. An authenticated user can manipulate database configuration fields (specifically the PostgreSQL username and database name) to inject arbitrary shell commands that execute within the database container. This vulnerability affects Coolify versions prior to 4.0.0-beta.474 and requires authentication to exploit, meaning an attacker must have legitimate access to the Coolify platform.

• CVE-2026-42204HIGH 8.8

  Coolify, an open-source platform for managing servers and containerized applications, contains a command injection vulnerability in versions 4.0.0-beta.471 through 4.0.0-beta.473. The flaw allows authenticated team members to bypass shell command restrictions and execute arbitrary commands directly on the host system by injecting ampersands into Docker Compose configuration fields. An attacker with valid team credentials can exploit this to compromise the underlying infrastructure.

• CVE-2026-44932HIGH 8.8

  A flaw in the wicked DHCP client allows a malicious DHCP server to inject unsanitized strings that lead to arbitrary code execution on affected machines. An attacker on the local network (or able to intercept DHCP traffic) can exploit this without user interaction to gain full control of a system. The vulnerability affects wicked versions before 0.6.79.

• CVE-2026-45172HIGH 8.8

  Idira Privileged Session Manager for SSH (PSMP) contains a flaw that allows authenticated users with basic system access to run arbitrary commands on the PSMP host itself. An attacker who already has valid credentials and low-level permissions—perhaps a contractor or junior staff member—could exploit incomplete input validation to escalate their privileges and take full control of the session management system. This is particularly dangerous because PSMP systems typically guard access to critical infrastructure and administrative credentials.

• CVE-2026-45564HIGH 8.8

  Roxy-WI, a web management interface for Haproxy, Nginx, Apache, and Keepalived servers, contains a command-injection vulnerability in versions 8.2.6.4 and earlier. An authenticated user with basic privileges can manipulate the configuration version parameter in a specific POST request to inject shell commands, which are then executed with the privileges of the Roxy-WI process. This is a post-authentication attack—the attacker must have valid credentials—but the low privilege requirement (role 3 or lower, typically standard 'user' accounts) and the complete impact on system confidentiality, integrity, and availability make this a significant risk for any organization running Roxy-WI in production.

• CVE-2026-45578HIGH 8.8

  WWBN AVideo, an open-source video streaming platform, contains a command injection vulnerability in its live streaming notification system. An authenticated attacker can inject shell commands by crafting input with special characters, allowing them to execute arbitrary code on the server. The flaw exists because the application builds system commands by concatenating user-supplied values without properly escaping shell metacharacters.

• CVE-2026-45662HIGH 8.8

  Dokploy, a self-hosted platform-as-a-service tool, contains a command injection vulnerability in its registry deletion function. When an administrator deletes a Docker registry configuration, the application fails to properly sanitize the registry URL before passing it to a system command. An attacker with legitimate platform access could craft a malicious registry URL that executes arbitrary commands on the server with the privileges of the Dokploy process. This vulnerability affects Dokploy version 0.29.0 and earlier.

• CVE-2026-46746HIGH 8.8

  SINEC INS, a Siemens industrial networking application, contains a command injection vulnerability in its file upload functionality. An authenticated user can craft malicious directory names that bypass input validation, plant shell commands, and trigger their execution when the application later retrieves directory listings. The attacker gains command execution at the privilege level of the service account, potentially compromising the entire system. All versions before 1.0 SP2 Update 6 are affected.

• CVE-2026-48732HIGH 8.8

  Warp, a development environment that enables agent-assisted coding workflows, contains a command injection vulnerability in its SSH handling mechanism. When Warp connects to remote hosts via SSH to gather metadata, it constructs helper commands using the remote working directory path. An attacker who controls a repository name, directory structure, or host configuration can inject malicious shell commands into that path. When Warp builds its helper command, those injected commands execute on the remote host with the privileges of the authenticated SSH session—effectively giving the attacker code execution as the victim user. The vulnerability affects Warp versions from March 2023 through early May 2026 and is resolved in version 0.2026.05.06.15.42.stable_01.

• CVE-2026-49190HIGH 8.8

  A flaw in Acer Connect M6E 5G firmware fails to properly enforce access controls when processing internal system instructions, allowing authenticated users to install unauthorized applications or execute arbitrary commands on the device. The vulnerability requires valid login credentials but provides no other barriers once an attacker gains initial access.

• CVE-2026-49492HIGH 8.8

  Markdown Preview Enhanced, a popular tool for rendering markdown documents with enhanced features, contains a critical flaw in how it handles external content. When you preview a markdown file, the extension can be tricked into executing system commands hidden within the document—specifically through diagram filenames, imported file paths, and LaTeX code attributes. On Windows systems, an attacker can craft a malicious markdown file that runs arbitrary operating system commands the moment you open it for preview. This happens because the tool passes unsanitized user input directly to the system shell without proper validation. The vulnerability was fixed in version 0.8.28 by changing how these inputs are processed and adding validation checks.

• CVE-2026-49959HIGH 8.8

  Hermes WebUI versions before 0.51.311 contain a vulnerability that allows authenticated users to run arbitrary commands on the server. An attacker with valid login credentials can inject malicious configuration into a Git repository's settings file (.git/config) that gets executed when the application performs Git operations like status checks or fetches. This is particularly dangerous because Git has multiple mechanisms for running external commands—including file monitors, credential handlers, and SSH wrappers—all of which can be weaponized through configuration poisoning.

• CVE-2026-54149HIGH 8.8

  MaxKB, an open-source AI assistant platform for enterprises, contains a vulnerability that allows authenticated users to execute arbitrary system commands on the server. An attacker with valid credentials can craft a malicious tool file (.tool) and import it through the platform's tool import feature. When that tool is subsequently triggered via an AI Chat node, the system will execute arbitrary operating system commands with the privileges of the MaxKB process. This requires the attacker to already have user authentication credentials and knowledge of how to structure a malicious MCP (Model Context Protocol) transport configuration.

• CVE-2026-5416HIGH 8.8

  A command injection vulnerability exists in Managed Ethernet Switch devices that allows an authenticated attacker with low-level privileges to inject malicious commands through an improperly validated name parameter. An attacker exploiting this flaw can execute arbitrary system commands and achieve complete control over the affected device. The vulnerability requires valid login credentials to trigger, but does not require user interaction once authenticated.

• CVE-2026-55607HIGH 8.8

  Claude Code versions 2.1.38 through 2.1.162 contain a sandbox escape vulnerability that allows attackers to execute arbitrary code on a user's machine outside the seatbelt sandbox. The flaw stems from improper handling of git worktrees, which can be manipulated to create directories named ".git" and access files outside the intended sandbox boundaries. An attacker can exploit this by hosting a malicious repository containing prompt injection content; when a user clones the repository and runs Claude Code against it, symlink manipulation and git fsmonitor execution during worktree operations can overwrite critical shell configuration files (such as .zshenv) in the user's home directory, achieving code execution with the user's privileges.

• CVE-2026-57999HIGH 8.8

  A command injection flaw in the luci-app-tailscale-community package allows any authenticated user to run arbitrary commands with root privileges. The vulnerability stems from improper handling of login server parameters in the Tailscale RPC method—specifically, user-supplied values are embedded in a shell command without proper escaping, enabling shell metacharacters like $() to break out and execute attacker-controlled code.

• CVE-2026-58000HIGH 8.8

  A command injection vulnerability exists in luci-proto-openvpn versions up to 0.11.1 that allows authenticated LuCI users with OpenVPN configuration access to execute arbitrary commands with root privileges. The vulnerability stems from improper handling of the cl_meta parameter in the generateKey ubus method, where user input is directly interpolated into a shell command without sanitization. An attacker with valid LuCI credentials can exploit this to gain complete control over the affected system.

• CVE-2026-58452HIGH 8.8

  JAIOTlink C492A-W6 Wi-Fi IP cameras contain a command injection flaw in their firmware that allows attackers who have valid login credentials to execute arbitrary system commands on the device. The vulnerability exists in the network configuration endpoint and can be triggered by crafting a specially formatted network parameter. An attacker with authenticated access could use this to gain complete control over the camera, potentially enabling lateral movement into the broader network infrastructure.

• CVE-2026-59734HIGH 8.8

  Coolify, an open-source deployment and server management platform, contains a command injection vulnerability in its health check feature. Authenticated users—those with login credentials—can inject malicious commands that execute inside deployment containers by manipulating health check parameters. The vulnerability affects Coolify versions before 4.0.0-beta.469 and was patched in that release. Because it requires authentication and grants full control over containers, this is a serious risk for multi-tenant or shared Coolify instances.

• CVE-2026-60102HIGH 8.8

  Horde Virtual File System (VFS) API versions before 3.0.1 contain a vulnerability that allows authenticated users to execute arbitrary commands on systems running the Horde_Vfs_Smb driver. The flaw exists in how the system escapes special characters in filenames—attackers can craft malicious filenames containing shell command sequences that bypass existing protections and execute with system privileges. This happens during file operations like uploads, folder creation, renaming, or deletion. Because the vulnerability requires authentication and affects a specific driver component, the attack surface is limited but serious for organizations using Samba file sharing with Horde.

• CVE-2026-61434HIGH 8.8

  PraisonAI versions prior to 4.6.78 contain a vulnerability in how it filters shell commands. The product attempts to block dangerous commands, but attackers can bypass this protection by using the `find` command's built-in actions (specifically `-exec`, `-execdir`, and `-delete`). This allows an authenticated attacker to read files that should be blocked, delete files, or run unauthorized programs without triggering the security filter. An attacker with login access can exploit this to escalate privileges or access sensitive data.

• CVE-2026-9155HIGH 8.8

  A command injection flaw in Rapid7's InsightConnect Sed Plugin allows authenticated users to run arbitrary system commands on Linux machines. An attacker with valid credentials can exploit insufficient input validation in the expression parameter to execute code with the privileges of the InsightConnect service. This is a local-to-remote escalation risk in automation environments where the plugin processes untrusted expressions.

• CVE-2026-9772HIGH 8.8

  Unraid, a popular NAS and virtualization platform, contains a remote code execution vulnerability in its web server that allows authenticated users to run arbitrary commands on the underlying system. The flaw resides in the file upload handler and stems from insufficient validation of user input before it's passed to a system command. An attacker with valid credentials could exploit this to gain code execution as the www-data user, potentially compromising the entire Unraid installation and any data or VMs it hosts.

• CVE-2026-9773HIGH 8.8

  Unraid, a storage and virtualization platform, contains a remote code execution vulnerability in its web server. An authenticated user can craft a malicious request to the ToggleState component that bypasses input validation, allowing them to run arbitrary system commands on the server. The attacker executes code with the privileges of the www-data user (the web server process), potentially compromising the entire Unraid installation and any data it manages.

• CVE-2026-9787HIGH 8.8

  A flaw in Quest NetVault Backup's logging daemon allows authenticated users to inject system commands through specially crafted JSON-RPC requests, leading to remote code execution with SYSTEM privileges. While the vulnerability nominally requires valid credentials, the authentication mechanism can be circumvented, making this a serious risk for organizations relying on NetVault Backup for data protection.

• CVE-2026-11527HIGH 8.6

  Config::IniFiles is a Perl library that reads configuration files in INI format. Versions before 3.001000 contain a critical flaw in how they open configuration files: they use Perl's two-argument open() function, which interprets special characters in filenames as shell commands or file redirections. If an attacker can control the filename passed to the library (via the -file argument), they can execute arbitrary OS commands or overwrite files on the system. The vulnerability affects any application using Config::IniFiles that processes untrusted configuration file paths.

• CVE-2026-44461HIGH 8.6

  Zed, a modern code editor, has a vulnerability in how it constructs commands for remote development over SSH or WSL (Windows Subsystem for Linux). When opening a terminal in a remote session, Zed builds a shell command that includes environment variables, but it doesn't properly escape or validate the names of those variables. An attacker who can inject a malicious environment variable name—such as through project-level terminal settings—can embed shell commands within that name. When the remote shell executes the command, it interprets these embedded instructions, allowing arbitrary code execution on the remote machine under the user's privileges. The flaw has been patched in version 0.227.1.

• CVE-2026-44463HIGH 8.6

  Zed, a modern code editor, contains a security flaw in how it controls which programs can run in the integrated terminal. An attacker can bypass these permission restrictions by sneaking environment variable assignments into commands that are supposed to be allowed. By manipulating variables like PAGER, an attacker can redirect the editor to run malicious code when it attempts to display output. This affects Zed versions before 0.229.0 and is resolved in that release.

• CVE-2026-44465HIGH 8.6

  Zed, a modern code editor, contains a critical vulnerability that allows attackers to execute arbitrary commands on a user's system. The flaw exists in how Zed handles Git configuration files when opening project folders. Specifically, attackers can craft a malicious .git/config file that abuses Git's core.fsmonitor setting to trigger code execution. When a user opens a folder containing this malicious configuration in untrusted mode, the attacker's commands run with the user's privileges. This is a local attack vector requiring user interaction, but the impact is severe: full system compromise including data theft, modification, and denial of service.

• CVE-2026-44466HIGH 8.6

  Zed is a popular code editor that includes a built-in terminal tool with a permission system designed to control which commands users can execute. Researchers discovered that this permission system has a critical flaw: attackers can bypass it using bash arithmetic expansion syntax—specifically the $((...)) construct—to nest arbitrary commands inside allowlisted commands like echo. This means a user could trick Zed into running malicious code even though the underlying command appeared safe. The vulnerability affects all versions of Zed prior to 0.229.0 and has been patched in that release.

• CVE-2026-55441HIGH 8.6

  mise, a tool for managing multiple development dependencies (Node, Python, CMake, Terraform), has a critical flaw in versions before 2026.6.4 where tasks can execute arbitrary commands without user consent. The vulnerability bypasses mise's trust feature by loading task files from directories like mise-tasks/ or .mise/tasks/ without ever checking whether the user has approved that directory. When you simply list available tasks or use tab completion—even read-only operations—malicious code embedded in task definitions runs immediately. An attacker needs only to trick a developer into cloning a repository and checking what tasks are available; no additional user action is required beyond that normal workflow step.

• CVE-2026-55427HIGH 8.3

  Coder, a platform that helps organizations set up remote development environments, has a vulnerability in versions prior to 2.29.7, 2.32.7, 2.33.8, and 2.34.2. The `coder config-ssh` command copies SSH configuration settings from the Coder server to a developer's local SSH config file without properly validating those settings. An attacker who controls or compromises the Coder server could inject malicious SSH configuration directives—including arbitrary commands—by embedding special characters into fields that get written to the user's SSH config. This could lead to remote code execution when the developer connects via SSH. Exploitation requires either server compromise, administrator access to specific settings, or a network position to intercept communications.

• CVE-2025-69755HIGH 8.2

  A vulnerability in the Neterbit NW-431F Router (firmware version NW-431F-20241014-IR03) allows attackers on the network to read sensitive information and run unauthorized commands on the device. An attacker can send specially crafted requests to the router's at_command.asp interface without needing credentials or user interaction, making this a direct and urgent threat to any organization using this model.

• CVE-2026-41010HIGH 8.2

  BOSH Director is vulnerable to arbitrary command execution when processing uploaded release tarballs. An attacker with elevated privileges can craft a malicious release manifest that embeds shell metacharacters in a job name. When the system unpacks the tarball, these characters are interpreted by the shell, allowing the attacker to execute arbitrary commands with the privileges of the BOSH Director process. The vulnerability stems from unsafe string interpolation of untrusted input directly into a shell command.

• CVE-2026-41011HIGH 8.2

  BOSH (the Cloud Foundry deployment automation framework) contains a shell injection vulnerability in its package validation logic. When a user uploads a release tarball containing a malicious package name, the system executes that name as a shell command without sanitization. An authenticated attacker with upload privileges can inject arbitrary commands that run with BOSH director privileges. The vulnerability exists because validation occurs after the dangerous shell operation, not before.

• CVE-2026-49260HIGH 8.2

  PhpWeasyPrint is a widely-used PHP library that generates PDF files from web pages or HTML content. A critical flaw in versions before 2.5.1 allows attackers with elevated privileges on a server to inject arbitrary shell commands by manipulating the WeasyPrint binary path. The vulnerability exists because the code incorrectly validates the binary path—it quotes the path, then checks if the quoted version exists as a file (which it never will), bypassing the safety check entirely. This means the unvalidated path flows directly into system command execution, giving an attacker a direct pathway to run malicious commands. The issue stems from a design flaw the library inherited from a similar codebase that was previously patched elsewhere.

• CVE-2026-44454HIGH 8.1

  Coder is a platform that lets organizations set up remote development environments through Terraform automation. A vulnerability in versions before 2.29.7 and 2.30.2 allowed attackers to run arbitrary code inside provisioned workspaces by injecting shell commands into the dotfiles configuration. An attacker could craft a special URL that automatically provisions a workspace with malicious code, requiring only a user click—no explicit confirmation needed. Coder fixed this by validating user input and removing unsafe shell execution patterns.

• CVE-2026-49402HIGH 8.1

  Deno's implementation of Node.js child process spawning on Windows contains a command injection vulnerability in its shell argument escaping logic. When developers use the shell:true option with spawn, spawnSync, exec, or related functions, Deno fails to properly quote and escape arguments containing Windows cmd.exe metacharacters, particularly the percent sign (%). An attacker who can control any part of an argument passed to these functions can inject and execute arbitrary additional commands within the spawned cmd.exe process. This affects Deno versions before 2.7.10 and is resolved in that release.

• CVE-2026-50874HIGH 8.1

  kanishka-linux Reminiscence version 0.3.0 contains a command injection flaw in its media management feature that allows authenticated users to execute arbitrary operating system commands on the affected server. An attacker with valid credentials can craft malicious input to the /manage/features/media endpoint to run commands with the privileges of the web application process, potentially leading to full system compromise.

• CVE-2026-56379HIGH 8.1

  ImageMagick, a widely-used open-source image processing library, contains a command injection vulnerability in how it handles SVG (Scalable Vector Graphics) files. An attacker can create a malicious SVG file that injects Magick Vector Graphics (MVG) commands, which are then executed during image rendering. This could allow an attacker to run arbitrary code on systems processing untrusted SVG files. The vulnerability affects ImageMagick versions before 7.1.2-15 (version 7.x branch) and before 6.9.13-40 (version 6.x branch).

• CVE-2026-40711HIGH 8.0

  Dell Container Storage Modules versions 2.16.0 across four product lines (PowerStore, Unity, PowerFlex, and PowerMax) contain an OS command injection flaw. An attacker with high-level administrative privileges and network access could craft malicious input to execute arbitrary commands on affected systems. This is a serious vulnerability because container storage infrastructure often handles critical data and sits in sensitive network positions.

• CVE-2026-44168HIGH 8.0

  MariaDB Server has a command injection vulnerability in its data replication process. When a database node joins a cluster using the mariabackup method, the existing node (donor) improperly validates parameters sent by the joining node. A malicious actor with high-level database access could craft malicious parameters to execute arbitrary commands on the donor's server. This affects multiple recent MariaDB versions across the 10.6, 10.11, 11.4, 11.8, and 12.3 release branches.

• CVE-2026-47294HIGH 8.0

  Microsoft Office SharePoint contains a vulnerability that allows authenticated users to execute arbitrary code on affected servers through specially crafted input in OS commands. An attacker with valid SharePoint credentials can inject malicious commands that bypass input validation, leading to unauthorized code execution with the privileges of the SharePoint service account. This vulnerability requires user interaction and network access but poses significant risk to organizations relying on SharePoint for document management and collaboration.

• CVE-2026-48163HIGH 8.0

  MariaDB servers are vulnerable to arbitrary command execution when two nodes communicate during a state transfer process (SST). An attacker who controls a newly joining node can trick the existing node into running malicious shell commands. This affects multiple MariaDB versions and relies on the rsync method for transferring data between nodes. The vulnerability requires administrative access to initiate the join process, but once exploited, it provides full control over the donor database server.

• CVE-2026-48165HIGH 8.0

  A critical security flaw in MariaDB allows high-privileged database users to execute arbitrary shell commands with the permissions of the MariaDB process on Galera cluster joiner nodes. The vulnerability exists in the wsrep_sst_receive_address and wsrep_sst_donor configuration variables, which can be manipulated by administrative users to break out of the database context. This affects multiple versions across MariaDB's active release lines and requires immediate patching to prevent unauthorized system access.

• CVE-2026-48719HIGH 8.0

  Warp, a development environment designed to support agentic workflows, contains a command injection vulnerability in how it handles Git branch names. An attacker who can push a malicious branch to a repository can craft a branch name containing shell commands. When a developer using Warp selects that branch from the UI, the crafted commands execute in the victim's shell with their privileges. This requires the attacker to have push access to the repository and the victim to interact with the malicious branch through Warp's interface.

• CVE-2025-41281HIGH 7.8

  Nozomi Networks Labs discovered a code execution vulnerability in Waterfall's WF-500 RX Host that allows attackers already inside a network to run arbitrary commands. The vulnerability is triggered when a MySQL connector is configured and an attacker with access to the connected TX Host sends malicious input. This is a local privilege escalation scenario where internal network access is the prerequisite for exploitation.

• CVE-2026-12537HIGH 7.8

  Google's Gemini CLI and its accompanying GitHub Action contain a command injection vulnerability that allows an attacker to execute arbitrary code on a developer's machine or CI/CD pipeline before containerization takes place. An attacker can craft a malicious `.gemini` or `.env` configuration file that, when processed by the vulnerable tool, breaks out of intended command boundaries and runs attacker-controlled commands with the privileges of the user running the tool. This is particularly dangerous in headless CI environments where automation runs without human oversight.

• CVE-2026-41857HIGH 7.8

  A malicious or compromised BOSH Director can trick operators into executing arbitrary shell commands on their local workstations. When an operator runs standard BOSH CLI commands like bosh ssh, bosh scp, or bosh logs -f, a hostile Director can inject and run commands with the operator's privileges. This affects BOSH CLI versions before 7.10.5 and requires user interaction—the operator must run the vulnerable command—but succeeds with default settings.

• CVE-2026-45322HIGH 7.8

  Microsoft's UFO framework, an open-source tool for automating tasks across devices, contains a command injection flaw in its shell execution component. An attacker with write access to UFO's session files can embed malicious system commands that execute with the privileges of the UFO process when a session is resumed or replayed. This creates a local privilege escalation risk in environments where session files may be accessible or shared.

• CVE-2026-46606HIGH 7.8

  Glances, a popular open-source system monitoring tool, contains a critical flaw in how it handles virtual machine names when monitoring KVM/QEMU environments. An attacker with local access to create or rename virtual machines can inject shell commands into those names, causing Glances to execute arbitrary commands with the privileges of the user running it—typically root on hypervisor hosts. This issue affects all versions prior to 4.5.5.

• CVE-2026-46735HIGH 7.8

  Dell Display and Peripheral Manager for Mac (versions before 2.3) has a command injection flaw that lets a local attacker with low-level system access run arbitrary OS commands. An attacker could exploit this to execute code with the privileges of the user running the vulnerable software, potentially compromising the affected Mac system.

• CVE-2026-48703HIGH 7.8

  Warp, a development environment designed to support agent-assisted coding workflows, contains a critical gap in its command execution controls. The Grep and FileGlob search tools—which appear to users as read-only operations—actually construct and run shell commands built from untrusted input provided by the agent. An attacker or compromised agent instance could exploit this to execute arbitrary commands within the user's terminal session, effectively bypassing intended security boundaries. The flaw affects Warp versions from April 2025 through May 2026 and is resolved in version 0.2026.05.06.15.42.stable_01.

• CVE-2026-48723HIGH 7.8

  BrowserStack's Cypress CLI tool contains a command injection vulnerability in how it processes configuration file paths. When users specify a cypress config file location, the tool passes that path unsafely to the operating system shell, allowing an attacker to inject arbitrary commands by crafting a malicious config file path with shell metacharacters. An attacker could exploit this to run commands with the same privileges as the user running the Cypress tests. This affects all versions before 1.36.6.

• CVE-2026-48731HIGH 7.8

  Warp, a developer environment tool, contains a command injection vulnerability in how it launches external text editors on Linux systems. When a user opens a file through Warp's editor integration features, the application expands desktop configuration templates without properly sanitizing the file path. An attacker can craft a malicious file path containing shell commands that will execute with the user's privileges when the file is opened. This affects Warp versions from February 2024 through early May 2026, and is resolved in version 0.2026.05.06.15.42.stable_01.

• CVE-2026-48778HIGH 7.8

  Notepad++ contains a vulnerability where a malicious actor with local access to a user's computer can modify a configuration file to execute arbitrary commands with the privileges of the user running Notepad++. The vulnerability exists because Notepad++ reads a command-line interpreter setting from its config.xml file without verifying that the value is legitimate, then uses that untrusted value directly when the user attempts to open a command prompt in a folder. This allows attackers to replace the legitimate command interpreter path with malicious code that runs silently when triggered. The vulnerability affects versions prior to 8.9.6.1.

• CVE-2026-48800HIGH 7.8

  Notepad++ versions before 8.9.6.1 allow arbitrary command injection through the shortcuts configuration file. An attacker who can modify the shortcuts.xml file—either directly or by tricking a user into importing a malicious configuration—can inject shell commands that execute with the user's privileges when that menu item is clicked. Because the injected command appears as a normal entry in the Run menu, this creates both an execution risk and a stealthy persistence mechanism.

• CVE-2026-49366HIGH 7.8

  JetBrains IntelliJ IDEA contains a command injection vulnerability in its filename completion feature that could allow an attacker to execute arbitrary commands on a developer's machine. The vulnerability requires local access and user interaction—specifically, a user must interact with the filename completion mechanism—but once triggered, it grants full system access with the privileges of the user running the IDE. This affects versions before 2026.1.1.

• CVE-2026-55895HIGH 7.8

  Vim's file browser (netrw plugin) contains a code injection flaw that allows arbitrary Vimscript execution when deleting files with specially crafted names. An attacker who controls a filename in a directory you browse—such as through a shared folder or downloaded archive—can embed a pipe character (|) to break out of the intended delete command and run malicious code, including shell commands. The vulnerability requires user interaction (opening a directory and triggering file deletion) but no special privileges. Vim versions before 9.2.0663 are affected.

• CVE-2026-56137HIGH 7.8

  RPG MAKER MV and MZ game development tools contain a vulnerability that allows attackers to run unauthorized system commands on a developer's machine if they open a specially crafted save file. This is a local attack that requires user interaction—an attacker would need to trick a developer into loading a malicious save file—but once triggered, it grants complete system-level access to the attacker. The vulnerability affects both major versions of the engine and poses significant risk to game developers and anyone using these tools.

• CVE-2026-58459HIGH 7.8

  A vulnerability in gpsd (the open-source GPS daemon) allows attackers to run arbitrary shell commands on systems running gpsprof if an attacker can control the GPS device subtype information. The flaw exists because subtype values from GPS data aren't properly sanitized before being inserted into gnuplot commands. When a user generates a plot using gpsprof and gnuplot, the malicious subtype text (containing backticks or shell metacharacters) gets executed as shell commands by the user running gnuplot. This is a local-attack scenario requiring either direct control of a GPS device or manipulation of GPS log data.

• CVE-2026-54699HIGH 7.7

  Warp, a terminal-based development environment designed for WSL (Windows Subsystem for Linux), has a command injection vulnerability affecting versions from March 2024 through early May 2026. When Warp fails to open a URL through its primary WSL mechanism (wslview), it falls back to Windows command processing. An attacker can craft malicious URLs that appear in terminal output; when a developer clicks such a link, arbitrary OS commands execute with the user's privileges. The vulnerability requires user interaction but can cross security boundaries, making it a meaningful risk in shared or compromised terminal environments.

• CVE-2026-8592HIGH 7.7

  A critical flaw in Rapid7's InsightConnect AWK Plugin allows attackers to run arbitrary commands on Linux systems. The vulnerability exists in how the plugin processes text and expressions, failing to properly sanitize user input before passing it to shell commands. An attacker without credentials can exploit this remotely to gain full command execution on affected systems.

• CVE-2026-8660HIGH 7.7

  A command injection vulnerability exists in Rapid7's InsightConnect Ping Plugin on Linux systems. The vulnerability stems from improper handling of user-supplied input in the ping action's host parameter. An unauthenticated attacker can craft malicious input that breaks out of the intended ping command and executes arbitrary operating system commands with the privileges of the InsightConnect process. This is a network-accessible vulnerability that requires no user interaction or authentication to exploit.

• CVE-2026-8665HIGH 7.7

  A command injection vulnerability exists in Rapid7 InsightConnect's Translate Plugin on Linux systems. An attacker can send specially crafted requests containing malicious input in the text or expression parameters of the TR action, which the plugin fails to properly sanitize before using in shell commands. This allows remote execution of arbitrary operating system commands with the privileges of the InsightConnect process. No authentication is required to exploit this vulnerability.

• CVE-2026-8666HIGH 7.7

  A flaw in Rapid7's InsightConnect Traceroute Plugin allows attackers to inject and execute arbitrary operating system commands on Linux systems. The vulnerability exists because the plugin fails to properly validate user-supplied input—specifically the host, port, max_ttl, count, or time_out parameters—before using them to construct shell commands. An attacker with network access can exploit this to run malicious commands with the privileges of the plugin process, potentially compromising the affected system.

• CVE-2026-10796HIGH 7.5

  nvm (Node Version Manager) versions through 0.40.4 contain a command injection vulnerability in how they process version strings retrieved from configured Node.js mirrors. When you run commands like `nvm install`, the tool fetches available versions from a mirror's index and builds download URLs and shell commands using the version string without proper sanitization. An attacker controlling the mirror, intercepting unencrypted mirror traffic, or providing malicious mirror content can inject arbitrary commands that execute with the privileges of the user running nvm. The official default mirror (nodejs.org over HTTPS) is not affected, but users relying on alternative mirrors or unencrypted connections face significant risk.

• CVE-2026-12398HIGH 7.5

  A command injection flaw in galaxy_ng allows authenticated users to execute arbitrary code on pulp worker systems. The vulnerability exists in the legacy role import API, where unvalidated git branch or tag names are passed directly into shell commands. An attacker who controls a git repository can craft malicious branch or tag names containing shell metacharacters to gain remote code execution. The attack requires authentication and is only possible when legacy role support is explicitly enabled in the configuration.

• CVE-2026-40519HIGH 7.5

  Nginx Proxy Manager contains a flaw that allows authenticated users with certificate management permissions to run arbitrary commands on the server by injecting malicious code into a certificate credential field. When the application restarts, the injected commands execute automatically, giving attackers the ability to take control of the system. Versions 2.9.14 through 2.15.1 are affected; the issue has been patched in a specific code commit.

• CVE-2026-55420HIGH 7.5

  Discourse, a popular open-source discussion platform, contains a vulnerability in how it processes PDF file uploads under certain non-default server configurations. An authenticated user could exploit this flaw to execute arbitrary code on the server hosting Discourse. The vulnerability affects multiple version branches and has been patched in recent releases across the supported version lines.

• CVE-2026-55697HIGH 7.5

  pnpm, a widely-used JavaScript package manager, has a vulnerability that allows attackers to execute arbitrary code on a developer's or CI system during package installation. The vulnerability exists in how pnpm handles special dependencies declared in workspace configuration files. An attacker who controls a repository can declare a malicious package as a configuration dependency, which pnpm will then download and execute without proper safeguards. This affects pnpm versions before 10.34.2 and 11.5.3.

• CVE-2026-58652HIGH 7.5

  A privilege-escalation flaw in luci-app-travelmate and the travelmate package allows an attacker with delegated write permissions to the travelmate configuration to execute arbitrary commands as root. The vulnerability exists because the web UI (LuCI) only restricts the auto-login script picker to a safe directory on the frontend, but the backend travelmate service—which runs as root—reads the raw UCI configuration values and executes whatever script path is specified without proper validation. An attacker can bypass the UI restriction by directly setting the script parameter to any executable (e.g., /bin/sh) and the script_args parameter to attacker-controlled commands, leading to complete system compromise.

• CVE-2026-6893HIGH 7.5

  A vulnerability in dracut, a critical tool used during Linux system boot, allows an attacker on the same local network to inject malicious commands during the DHCP configuration process. By crafting specially designed DHCP responses (for example, containing a hostile hostname), an attacker can execute arbitrary code with root privileges while the system is still booting. This happens because dracut fails to properly escape DHCP data before inserting it into temporary shell scripts used during initialization. The attack requires network proximity but no authentication, making it a practical threat in shared network environments such as offices, data centers, or cloud infrastructure.

• CVE-2026-9863HIGH 7.5

  Fortra BoKS Manager, a privileged access management tool, contains a command injection vulnerability in its legacy client upgrade mechanism. When a compromised or malicious tar-based client is selected for upgrade or patching, an attacker can execute arbitrary OS commands on the BoKS Master server. This vulnerability requires user interaction (an administrator initiating an upgrade) and network access, but the impact is severe—attackers gain the ability to compromise the core access control infrastructure that BoKS Manager protects.

• CVE-2026-10214HIGH 7.3

  A command injection vulnerability exists in the Bash Tool component of chatgpt-on-wechat versions up to 2.0.8. An attacker can remotely exploit a flaw in the _get_safety_warning function to execute arbitrary operating system commands without authentication. This issue is being actively exploited in the wild. Organizations using affected versions should prioritize upgrading to 2.0.9 immediately.

• CVE-2026-10219HIGH 7.3

  nextlevelbuilder GoClaw versions up to 3.11.3 contain a command injection vulnerability in the write_file tool. An unauthenticated attacker can manipulate the WriteFile function to inject arbitrary operating system commands, which are then executed on the affected system. The vulnerability is remotely exploitable and does not require user interaction or special privileges.

• CVE-2026-10273HIGH 7.3

  php-censor versions up to 2.1.6 contain a remote code execution vulnerability in the webhook processing logic. An attacker can manipulate the commitId parameter sent to the Webhook Endpoint to inject and execute arbitrary operating system commands on the affected server. No authentication is required, and the exploit technique has been publicly disclosed, increasing the likelihood of active exploitation.

• CVE-2026-11417HIGH 7.3

  AWS CDK (Cloud Development Kit) contains a command injection vulnerability in how it bundles Node.js functions for local development and deployment. An attacker who can control certain bundling settings—such as external modules, code definitions, loaders, injections, or esbuild arguments—can inject shell commands that execute on the developer's machine when the CDK toolchain runs. This requires an attacker to have influence over the CDK application configuration, making it relevant primarily in shared development environments or when developers use untrusted CDK configurations.

• CVE-2026-13760HIGH 7.3

  AWS CDK (Cloud Development Kit) versions prior to 2.260.0 contain a command injection flaw in the Docker bundling pipeline used for Node.js functions. An attacker who can modify the version strings of dependencies in your project's package.json file can inject shell commands that execute with the privileges of the user running the CDK toolchain. This is a local attack that requires an insider or someone with write access to your source repository.