Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows command injection due to an incomplete regular expression validation.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the DATE parameter of /cgi-bin/logs_log.cgi. Authenticated users can exploit this flaw because the DATE parameter is used unsafely in a Perl open() call due to incomplete input validation. This allows arbitrary OS command execution with the privileges of the affected process. The vulnerability has a high severity score of 8.7. No patch or official fix information is currently provided, and no known exploits are reported in the wild.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the DATE parameter of /cgi-bin/logs_ids.cgi. Authenticated users can exploit this flaw because the DATE parameter is used unsafely in a Perl open() call due to incomplete input validation. This allows arbitrary OS command execution. The vulnerability has a high severity with a CVSS score of 8.7. No patch or official remediation has been indicated in the provided data. There are no known exploits in the wild at this time.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the handling of the DATE parameter in /cgi-bin/logs_firewall.cgi. Authenticated users can exploit this flaw to execute arbitrary operating system commands due to insufficient validation of the DATE parameter, which is used in a Perl open() call. This vulnerability is classified as CWE-78 and has a high severity with a CVSS score of 8.7. No official patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the /cgi-bin/logs_clamav.cgi endpoint. Authenticated users can exploit improper input validation of the DATE parameter, which is used in a Perl open() call to construct a file path, allowing arbitrary OS command execution. This vulnerability is due to incomplete regular expression validation of the input. The CVSS 4.0 base score is 8.7, indicating high severity. No official patch or remediation information is currently provided by the vendor.
Endian Firewall version 3.3.25 and earlier contains an OS command injection vulnerability in the logs_proxy.cgi component. Authenticated users can exploit improper input validation of the DATE parameter to execute arbitrary operating system commands. This occurs because the parameter is used to build a file path passed to a Perl open() call without sufficient sanitization. The vulnerability has a high severity with a CVSS 4.0 score of 8.7. No patch or official fix information is currently provided.
CVE-2026-3692 is a high-severity OS command injection vulnerability in Progress Software Flowmon versions prior to 12.5.8. It allows an authenticated low-privileged user to craft a malicious request during report generation that can execute unintended commands on the server. This vulnerability arises from improper neutralization of special elements used in OS commands (CWE-78). No known exploits are reported in the wild. There is no explicit vendor advisory or patch information provided, so patch status is not confirmed.
CVE-2026-2701 is a critical vulnerability in Progress ShareFile Storage Zones Controller that allows an authenticated user to upload a malicious file to the server and execute it, resulting in remote code execution. The vulnerability arises from unrestricted upload of files with dangerous types. It has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation information is currently provided. The vulnerability affects the product version indicated as '0', with no known exploits in the wild at this time.
CVE-2026-33613 is a high-severity remote code execution vulnerability in MB connect line's mbCONNECT24 product. It arises from improper neutralization of special elements in OS commands within the generateSrpArray function. Exploitation requires the attacker to have a prior capability to write arbitrary data to the user table. Successful exploitation could lead to full system compromise. There is no information about an available patch or vendor advisory. No known exploits are reported in the wild.
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow an unauthenticated user to execute arbitrary commands as lower user privileges on the system due to improper validation of user supplied input.
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.
wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title). In versions 0.3.1 and prior, a GitHub Actions workflow uses untrusted user input from issue_comment.body directly inside a shell command, allowing potential command injection and arbitrary code execution on the runner. At time of publication, there are no publicly available patches.
CVE-2026-0596 is a critical command injection vulnerability in mlflow/mlflow when serving a model with the enable_mlserver option set to true. The vulnerability arises because the model_uri parameter is embedded directly into a shell command executed via bash without proper sanitization. This allows an attacker to inject shell metacharacters to execute arbitrary commands. Exploitation can lead to full confidentiality, integrity, and availability compromise, including potential privilege escalation if the service runs with elevated privileges and serves models from writable directories by lower-privileged users.
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.
baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated user with administrator privileges in baserCMS can execute arbitrary OS commands on the server with the privileges of the user account running baserCMS. This issue has been patched in version 5.2.3.
baserCMS versions prior to 5.2.3 contain an OS command injection vulnerability in the installer component. This vulnerability allows an attacker to execute arbitrary operating system commands due to improper neutralization of special elements. The issue has been addressed and patched in version 5.2.3. The vulnerability has a critical severity with a CVSS score of 9.2.
baserCMS versions prior to 5.2.3 contain a critical OS command injection vulnerability in the core update functionality. An authenticated administrator can exploit this flaw to execute arbitrary operating system commands on the server. The vulnerability arises from improper neutralization of special elements in user input passed directly to the exec() function without adequate validation or escaping. This issue has been addressed and patched in version 5.2.3.
CVE-2026-33030 affects nginx-ui versions 2.3.3 and earlier, where an Insecure Direct Object Reference (IDOR) vulnerability allows any authenticated user to access, modify, or delete resources belonging to other users. This occurs because the application's base Model struct lacks a user_id field, and resource endpoints do not verify user ownership, resulting in complete authorization bypass in multi-user environments. No patches are publicly available at this time. The vulnerability has a high severity with a CVSS score of 8.8.
A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependency specifications from the model artifact's `python_env.yaml` file and directly interpolates them into a shell command without sanitization. This allows an attacker to supply a malicious model artifact and achieve arbitrary command execution on systems that deploy the model. The vulnerability affects versions 3.8.0 and is fixed in version 3.8.2.
CVE-2026-4946 is a high-severity OS command injection vulnerability in NSA Ghidra versions prior to 12.0.3. The issue arises because Ghidra improperly processes @execute annotations embedded in automatically extracted binary data during auto-analysis. This flaw allows a crafted binary to display clickable text in the UI that, when clicked by an analyst, executes arbitrary commands on the analyst's machine. The vulnerability affects local users interacting with the UI and requires user interaction to trigger. No official patch information is provided in the data, and no known exploits are reported in the wild.