CWE-78: OS Command Injection vulnerabilities

CVE-2026-39902 is an OS command injection vulnerability in the Cacti performance and fault management framework. Versions prior to 1.2.31 have an incomplete input blocklist that allows an authenticated admin to bypass filtering by using single quotes, redirect operators, or subshell parentheses. This flaw enables execution of arbitrary OS commands. The issue has been fixed in version 1.2.31.

CVE-2026-114355 is an OS command injection vulnerability in the DJI CrystalSky ZS600C firmware versions 0.3.9.7 through 0.6.6.9. It involves the root-privileged 'hardware_monitor' helper reading lines from the Android log (logcat) and passing them to a shell eval, allowing a local unprivileged process to execute arbitrary commands as root.

A missing authorization vulnerability exists in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware versions 0.3.9.7 through 0.6.6.9. This flaw allows a local application without any permissions to execute arbitrary operating system commands as root by passing a caller-supplied string to the root-privileged 'assistant' daemon's system() call without verifying caller identity or permissions.

PraisonAI versions from 4.6.10 up to but not including 4.6.59 contain an OS command injection vulnerability. This occurs because certain file operation commands are constructed using raw path arguments that are passed to shell-backed compute providers without proper sanitization. An attacker able to control these path arguments can execute arbitrary shell commands on the compute environment, either on the host or inside a Docker container. The issue is fixed in version 4.6.59.

CVE-2026-57142 is a high-severity OS command injection vulnerability in MervinPraison's PraisonAI multi-agent teams system. Versions from 4.5.87 up to but not including 4.6.61 are affected. The flaw arises because the recipe execution policy only checks dangerous tools declared in TEMPLATE.yaml, but steps-based recipes can self-approve dangerous tools like execute_command via workflow.yaml, bypassing the intended restriction. This allows untrusted recipes to execute critical shell commands without explicit permission. The issue has been fixed in version 4.6.61.

CVE-2026-56838 is an OS command injection vulnerability in MervinPraison's PraisonAI affecting versions from 4.5.87 up to but not including 4.6.59. The issue arises because the streaming execution path recipe.run_stream() bypasses the dangerous tool policy check that is enforced in the normal recipe.run() path. This allows execution of commands that should be denied unless explicitly allowed. The vulnerability has been fixed in version 4.6.59.

CVE-2026-75775 is an OS command injection vulnerability in certain ASUS routers. It allows a remote attacker to execute arbitrary commands with root privileges by sending crafted parameters to the router while it is in its factory-default state. This vulnerability arises from improper neutralization of special elements used in OS commands. The issue affects ASUS routers before any firmware update is applied.

CVE-2026-75779 is a high-severity vulnerability in an ASUS router model involving OS command injection combined with Cross-Site Request Forgery (CSRF). This flaw allows an attacker to trick a logged-in administrator into visiting a malicious website, which then causes the router to execute arbitrary commands with root privileges. The vulnerability arises from improper neutralization of special elements used in OS commands and the presence of CSRF, enabling unauthorized command execution.

The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root.

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary operating system commands as root, resulting in full device compromise.

CVE-2026-109122 is a critical OS command injection vulnerability in the Kiloview E3 NDI encoder firmware. The network management service does not properly sanitize input when configuring static routes via the web management API. An authenticated user with permission to configure static routes can execute arbitrary OS commands as root. The malicious configuration persists across device reboots, potentially leading to full device compromise including exposure of stored credentials and cryptographic material.

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To remediate this issue, users should upgrade to version 1.166.2 or later.

CVE-2026-96376 is an OS Command Injection vulnerability in Drupal Cloud versions from 0.0.0 up to but not including 7.0.1. This flaw allows improper neutralization of special elements used in OS commands, potentially enabling an attacker with limited privileges and requiring user interaction to execute arbitrary commands. The vulnerability has a medium severity score of 6.4 and was fixed in version 7.0.1.

CVE-2026-113788 is a critical OS command injection vulnerability in the ssh service of Lagoon core versions prior to 2.33.2. An attacker with a Lagoon user account could exploit this flaw to execute arbitrary code, potentially gaining elevated administrative permissions. The vulnerability is fixed in Lagoon version 2.33.2. Disabling the ssh service in Lagoon core can serve as a workaround. The ssh-portal service and related components are not affected.

CVE-2026-70386 is a high-severity OS command injection vulnerability in OnePlus OxygenOS affecting versions from 15.0.0 before 15.0.0.2000 and from 16.0.0 before 16.0.5.1200. It allows any locally installed Android app, without declared permissions or user interaction beyond launch, to execute arbitrary shell commands as root in the dumpstate SELinux domain. This occurs due to lack of authorization on a binder interface and unsanitized input passed to a system command. Fixed versions are 15.0.0.2000 and 16.0.5.1200.

CVE-2026-105044 is an OS command injection vulnerability in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0. It affects Security Toolbox versions before 20260929 and allows an authenticated console administrator to execute arbitrary commands on attached clients. The vulnerability arises from improper neutralization of special elements used in OS commands.

A command injection vulnerability exists in the virtualenv tool for Python prior to version 21.14.4. The issue arises from improper escaping of environment names in the bash activate script, which zsh also sources. This allows an attacker to execute arbitrary commands in the user's shell prompt when using zsh with PROMPT_SUBST enabled. The vulnerability is fixed in version 21.14.4.