CVE-2026-7461 is a high-severity OS command injection vulnerability in the FSx Windows File Server volume mounting component of the Amazon ECS Agent on Windows versions before 1.103.0. It allows a remote authenticated attacker with permissions to register ECS task definitions or write to Secrets Manager or SSM Parameter Store credentials to execute shell commands with SYSTEM privileges on the host via a crafted username in an ECS task definition. AWS has released version 1.103.0 to remediate this issue.
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can inject arbitrary shell commands by submitting a POST request with crafted radius_address, radius_address2, shared_secret2, source_ip, timeout, or retry parameters along with save=1 and enable_radius=1 to achieve remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-11 (UTC).
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection.
This issue affects Pardus OS My Computer: from <=0.7.5 before 0.8.0.
CVE-2024-54012 is a high-severity OS command injection vulnerability in the Hanwha Vision QND-8080R camera. The device fails to properly validate input, allowing specially crafted requests to execute malicious OS commands. The vulnerability was discovered by penetration testers at Amazon. The manufacturer has released patch firmware to address this issue. No known exploits are reported in the wild at this time.
CVE-2026-1460 is a high-severity post-authentication OS command injection vulnerability in Zyxel DX3301-T0 and EX3301-T0 firmware versions up to 5.50(ABVY.7.1)C0. It arises from improper neutralization of special elements in the DomainName parameter of the DHCP configuration file, allowing an authenticated administrator to execute arbitrary OS commands on the device. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-0711 is a post-authentication OS command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions up to 5.50(ABVY.7.1)C0. An attacker with administrator privileges and adjacent network access could exploit this flaw to execute arbitrary OS commands on the affected device. The vulnerability has a CVSS score of 6.8, indicating a medium severity level. There is no official patch or remediation guidance currently available from Zyxel. No known exploits are reported in the wild at this time.
CVE-2026-32649 is a command injection vulnerability in the web server of certain firmware versions of the Milesight MS-Cxx63-PD camera. This flaw allows an attacker with high privileges and partial user interaction to execute arbitrary commands on the affected device. The vulnerability has a high severity score of 7.3 according to CVSS 4.0 metrics. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-7037 is a critical OS command injection vulnerability in the Totolink A8000RU router firmware version 7.1cu.643_b20200521. It affects the setVpnPassCfg function within the /cgi-bin/cstecgi.cgi CGI handler. An attacker can remotely manipulate the pptpPassThru argument to execute arbitrary operating system commands. The vulnerability has a high CVSS score of 9.3, indicating severe impact if exploited. Although an exploit has been publicly released, there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance has been provided by the vendor at this time.
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, SiYuan desktop renders notification messages as raw HTML inside an Electron renderer. The notification route POST /api/notification/pushMsg accepts a user-controlled msg value, forwards it through the backend broadcast layer, and the frontend inserts it into the DOM with insertAdjacentHTML(...) at message.ts. On desktop builds, this is not limited to ordinary XSS. Electron windows are created with nodeIntegration: true, contextIsolation: false, and webSecurity: false at main.js. As a result, JavaScript executed from the notification sink can directly access Node APIs and escalate to desktop code execution. This vulnerability is fixed in 3.6.5.
radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2_cmd_str(). Attackers can inject shell metacharacters through the jsonrpc interface parameters to achieve remote code execution on the host running radare2-mcp without requiring authentication.
elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injection vulnerability in the resize command. The bg (background color) parameter is accepted from user input and passed through image resize/rotate processing. In configurations that use the ImageMagick CLI backend, this value is incorporated into shell command strings without sufficient escaping. An attacker able to invoke the resize command with a crafted bg value may achieve arbitrary command execution as the web server process user. This vulnerability is fixed in 2.1.67.
CVE-2026-41208 is a high-severity OS command injection vulnerability in versions of @paperclipai/server prior to 2026.416.0. It allows an attacker with an Agent API key to escalate privileges by injecting arbitrary shell commands through the adapterConfig.workspaceStrategy.provisionCommand field. This leads to remote code execution on the Paperclip server host. The vulnerability arises because the server executes this provisionCommand without proper neutralization of special elements, breaking the trust boundary between agent runtime and server host. The issue is fixed in version 2026.416.
CVE-2026-5935 is a high-severity vulnerability in IBM Total Storage Service Console (TSSC) / TS4500 IMC versions 9.2.0 through 9.6. It allows an unauthenticated attacker to execute arbitrary OS commands with normal user privileges due to improper validation of user-supplied input. The vulnerability is classified as CWE-78, OS Command Injection. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.
radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2's shell execution operator.
CVE-2026-41064 is a critical OS command injection vulnerability in WWBN AVideo versions up to and including 29.0. The issue arises from an incomplete fix in the test.php script where only the wget command path is sanitized using escapeshellarg, but the file_get_contents and curl code paths remain unsanitized. Additionally, the URL validation regex is insufficient, allowing malformed URLs like 'httpevil.com' to bypass checks. This vulnerability has a high CVSS score of 9.3, indicating a severe risk of remote exploitation without authentication. A commit (78bccae74634ead68aa6528d631c9ec4fd7aa536) contains an updated fix, but no official patch or vendor advisory is provided in the data. No known exploits in the wild have been reported at this time.
CVE-2026-40933 is a critical OS command injection vulnerability in FlowiseAI's Flowise product prior to version 3.1.0. It arises from unsafe serialization of stdio commands in the MCP adapter, allowing an authenticated attacker to add a malicious MCP stdio server with arbitrary commands. Despite input sanitization attempts, attackers can bypass these checks and execute arbitrary OS commands. This vulnerability is fixed in Flowise version 3.1.0.
FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are passed directly to shell_exec() without sanitization or escaping. An authenticated user with a valid bearer token can send a GraphQL moduleOperations mutation with backtick-wrapped commands in the module field to execute arbitrary commands on the underlying host as the web server user.
This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the targeted device.
Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.
CVE-2026-5965 is a critical OS Command Injection vulnerability in NewSoftOA by NewSoft. It allows unauthenticated local attackers to inject and execute arbitrary operating system commands on the server. The vulnerability is due to improper neutralization of special elements used in OS commands (CWE-78). No official patch or remediation guidance is currently available from the vendor. The vulnerability has a high CVSS 4.0 score of 9.3, indicating critical severity. There are no known exploits in the wild at this time. The affected version is listed as '0', which may indicate an initial or unspecified version. Since this is not a cloud service, remediation depends on vendor patching or user mitigation.