CVE-2026-100254 is a command injection vulnerability in JetBrains TeamCity affecting versions before 2026.2, 2026.1.4, and 2025.11.8. Authenticated users can exploit CRLF injection in Pipeline Git connection settings to execute arbitrary commands on Windows servers. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-102937 is an OS command injection vulnerability in pypa virtualenv versions prior to 21.7.12. The issue arises because BatchActivator.quote() returns prompt text unchanged before it is inserted into a Windows cmd.exe set command. An attacker who can influence the --prompt, VIRTUALENV_PROMPT, or related configuration can inject a double quote to break out of the intended assignment and execute arbitrary commands when the user activates the virtual environment. This vulnerability is fixed in version 21.7.12.
### Impact
The generated `activate` (bash/zsh) and `activate.fish` scripts interpolate a `shlex.quote`-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs commands when a user sources the activation script.
`activate` is affected through the virtual environment's own path, on the branch that reports a relocated environment:
```sh
echo "Virtual environment directory __VIRTUAL_ENV__ does not exist!" >&2
```
For a destination named `x'$(id)'y`, `shlex.quote` emits `'x'"'"'$(id)'"'"'y'`. The inner `"` closes the enclosing double quote and `$(id)` is left unquoted. Backtick and `;` payloads reach the same result. This branch runs whenever the recorded path is absent, which is the normal case for a virtual environment copied or distributed to another machine.
`activate.fish` is affected through the interpreter's Tcl/Tk library paths:
```fish
set -gx TCL_LIBRARY '__TCL_LIBRARY__'
```
`shlex.quote` already returns `'/tcl/(cmd)/lib'`, so the rendered line is `''/tcl/(cmd)/lib''`. fish concatenates the adjacent quoted runs and expands the `(cmd)` left between them. The same doubling also splits a path containing a space into two list elements, corrupting `TCL_LIBRARY` and `TK_LIBRARY`.
This is the same defect class as GHSA-x78j-v8h9-3j2q, which covered `activate.bat`.
### Patches
Fixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so each value keeps only the quoting `shlex.quote` applied. Fix: https://github.com/pypa/virtualenv/pull/3252
### Workarounds
Avoid creating or distributing virtual environments whose path contains `'`, `` ` ``, `$`, `;`, `(` or `)`, and inspect the generated activation script before sourcing one you did not create.
CVE-2026-100292 is a high-severity OS command injection vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. It involves a hidden debug interface that can be enabled via an authenticated request, allowing additional commands to be sent to a backend service. This can expose system-level functionality that may be misused if crafted inputs reach the command handler.
CVE-2026-102829 is a critical OS command injection vulnerability in the steveukx git-js package, specifically related to the argv-parser dependency prior to version 2.0.1. The flaw allows an attacker to influence environment variables, causing Git to invoke an attacker-controlled editor during certain Git operations. This can lead to arbitrary command execution with the privileges of the Node.js process running git-js. The issue is fixed in argv-parser version 2.0.1.
A command injection vulnerability exists in the steveukx git-js library (simple-git) versions 3.15.0 through 4.0.0. The default blockUnsafeOperationsPlugin does not treat trailer.<token>.cmd as unsafe, allowing attacker-controlled input via SimpleGitOptions.config or inline -c arguments to execute arbitrary shell commands with the Node.js process's OS permissions. This issue is fixed in version 4.0.1.
CVE-2026-102826 is a command injection vulnerability in the simple-git library (git-js) prior to version 4.0.0. The vulnerability arises because the default blockUnsafeOperationsPlugin does not fully reject unsafe configuration includes supplied via customArgs to git.clone(), allowing attacker-controlled configuration files to be loaded. This can lead to execution of arbitrary commands with the privileges of the Node.js process running the application. The issue is fixed in version 4.0.0.
IBM Guardium Data Protection version 12.2 contains a command injection vulnerability in the CLI certificate SMIME recipient deletion functionality. This flaw allows an authenticated privileged CLI user to execute arbitrary OS commands with root privileges. The vulnerability has a high severity score and impacts confidentiality, integrity, and availability of the system.
IBM Guardium Data Protection version 12.2 contains a critical OS command injection vulnerability in its certificate export CLI functionality. This flaw allows a privileged authenticated CLI user to execute arbitrary commands with root privileges, potentially compromising the entire system.
IBM Guardium Data Protection version 12.2 contains a command injection vulnerability in its SNMP alert notification feature. An authenticated attacker able to modify policy alert text can execute arbitrary operating system commands with root privileges via the SNMP alerter service. This vulnerability is identified as CWE-78 and has a CVSS 3.1 score of 7.5, indicating high severity.
Weblate versions from 4.11.1 up to but not including 2026.8 contain an OS command injection vulnerability in the Mercurial backend. This flaw allows an authenticated user with project-scoped component.edit permission to exploit repository filenames starting with a dash (-) as Mercurial options, potentially leading to arbitrary command execution with the Weblate service account privileges. This vulnerability is a residual issue from an incomplete fix for CVE-2022-23915 and has been addressed in version 2026.8.
CVE-2026-82804 is a high-severity OS command injection vulnerability in Apache DolphinScheduler before version 3.4.3. It arises from insufficient neutralization of shell metacharacters in the scriptPath parameter used in a shell command. An authenticated user can exploit this by crafting a resource filename with shell command substitution syntax, leading to arbitrary command execution with DolphinScheduler service privileges. The issue is fixed in version 3.4.3.
OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository content (.gitattributes + .git/config) to execute arbitrary commands via the desktop app's workspace-changes diff viewer.
CVE-2026-102422 is a high-severity OS command injection vulnerability in the shell-quote library's quote() function. The vulnerability arises because comment tokens emitted as # followed by text can comment out the rest of a shell line, allowing line terminators in subsequent string tokens to end the comment and cause unintended shell command execution. This affects versions from 1.8.4 up to but not including 1.11.0. The issue was fixed in version 1.11.0 by making quote() throw a TypeError when a string after a comment token contains a line terminator.
The ConvertPlus WordPress plugin up to version 3.6.3 contains a vulnerability involving deserialization of untrusted data via an AJAX action parameter. This flaw allows authenticated users with Subscriber-level access or higher to inject a PHP object if a gadget chain is available in other installed plugins or themes. The vulnerability arises from insufficient nonce validation, lack of capability checks, and improper sanitization that permits shortcode injection leading to unsafe unserialization. Exploitation depends on the presence of a POP chain in additional installed components. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-55157 is a high-severity OS command injection vulnerability in the ooples token-optimizer-mcp product prior to version 5.1.0. The flaw exists in the smart_user tool, where the username argument of the get-user-info operation can be exploited to execute arbitrary shell commands with the privileges of the token-optimizer-mcp server user. This vulnerability has been patched in version 5.1.0.
FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator accepts an authenticated host parameter and uses it to build a shell command. The code path validates the generated OAuth access token before execution, but it does not validate or escape host. Compromise results in authenticated arbitrary shell command execution as the FreePBX web/PBX service user (typically asterisk.). This issue has been patched in version 17.0.9.
CVE-2026-54674 is an OS command injection vulnerability in FreePBX's security-reporting component affecting versions prior to 16.0.39 and 17.0.7. Authenticated users with access to the User Control Panel (UCP) can execute arbitrary commands as the webserver user due to insufficient sanitization of URL parameters. This vulnerability requires authenticated UCP access, which is more commonly granted to less-privileged users than to administrators. The issue has been addressed in FreePBX versions 16.0.39 and 17.0.7.
FreePBX versions prior to 16.0.4 and 17.0.6 contain a critical OS command injection vulnerability in the Music on Hold (MoH) module. Authenticated attackers with administrator privileges can inject arbitrary system commands via a POST parameter that defines a custom Asterisk application. This parameter is stored without sanitization and later written directly to the musiconhold_additional.conf configuration file, which Asterisk executes with its service privileges. The vulnerability has been patched in versions 16.0.4 and 17.0.6.
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.