CWE-78: OS Command Injection vulnerabilities

CVE-2026-0302 is an OS command injection vulnerability in Palo Alto Networks Checkov by Prisma Cloud. It allows a local user to execute arbitrary commands within Checkov processes. The vulnerability affects versions from 3.2.0 up to but not including 3.2.502. A fix is available in version 3.2.502. The CVSS score is low, reflecting limited impact and exploitability.

CVE-2026-0309 is a command injection vulnerability in Palo Alto Networks PAN-OS software that allows an authenticated administrator with CLI access and a device configured with a Luna Hardware Security Module (HSM) to execute arbitrary commands as root. The risk is reduced if CLI access is limited to a small group of administrators. Panorama, Cloud NGFW, and Prisma Access are not affected.

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating system console that improperly processes user-controlled input.

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command injection.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-81349 is an OS command injection vulnerability in Microsoft Azure HDInsight that allows an authorized attacker to elevate privileges over a network. The flaw arises from improper neutralization of special elements in OS commands. This vulnerability has a high severity score of 7.2 and has been officially fixed by Microsoft. Azure HDInsight is a cloud service, and Microsoft manages remediation for this service.

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.

Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00 contain an OS Command Injection vulnerability (CWE-78). This flaw allows a high privileged attacker with remote access to potentially execute arbitrary OS commands, leading to elevation of privileges. The vulnerability is rated high severity with a CVSS score of 7.2. No explicit patch information is provided in the input data.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.

Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00 contain an OS Command Injection vulnerability (CWE-78). This vulnerability allows an unauthenticated remote attacker to potentially execute arbitrary OS commands. The vulnerability has a high severity with a CVSS score of 7.3. No patch or remediation details are currently provided by the vendor.

A command injection vulnerability exists in stefanzweifel laravel-backup-restore prior to version 1.9.4. This flaw allows a crafted backup archive to execute arbitrary OS commands during the database restore process. The issue has been fixed in version 1.9.4.

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.

CVE-2026-85656 is an OS command injection vulnerability in the log4j-cve-2021-44228-hotpatch package for Amazon Linux versions before 1.3-9. It allows a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters. This vulnerability has a high severity with a CVSS score of 8.5. A fixed version 1.3-9.amzn2 is available.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.