CWE-77— Command Injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.— MITRE CWE catalog
4,588 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-77page 32 of 92
- CVE-2025-59272CRITICALCVSS 9.3EG 9.32025-10-09
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.
- CVE-2025-59252CRITICALCVSS 9.3EG 9.32025-10-09
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
- CVE-2025-61584CRITICALCVSS 9.3EG 9.32025-09-30
serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrust…
- CVE-2025-10364CRITICALCVSS 9.3EG 9.32025-09-12
The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product feat…
- CVE-2025-54994CRITICALCVSS 9.3EG 9.32025-09-08
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of i…
- CVE-2025-32711CRITICALCVSS 9.3EG 9.32025-06-11
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- CVE-2025-4009CRITICALCVSS 9.3EG 9.32025-05-28
The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product feat…
- CVE-2025-0868CRITICALCVSS 9.3EG 9.32025-02-20
A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoi…
- CVE-2024-7397CRITICALCVSS 9.3EG 9.32024-08-05
Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2.
- CVE-2024-42348CRITICALCVSS 9.3EG 9.32024-08-02
FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395.
- CVE-2024-23346CRITICALCVSS 9.3EG 9.32024-02-21
Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prio…
- CVE-2020-35798CRITICALCVSS 9.3EG 9.32020-12-30
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 befor…
- CVE-2015-5474HIGHCVSS v2 9.3EG 9.32015-08-13
BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.
- CVE-2015-0538HIGHCVSS v2 9.3EG 9.32015-05-07
ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets.
- CVE-2015-2846HIGHCVSS v2 9.3EG 9.32015-04-13
BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.
- CVE-2014-3524HIGHCVSS v2 9.3EG 9.32014-08-26
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- CVE-2010-0136HIGHCVSS v2 9.3EG 9.32010-02-16
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
- CVE-2026-93865CRITICALCVSS 9.2EG 9.22026-10-27
A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the F…
- CVE-2025-43858CRITICALCVSS 9.2EG 9.22025-04-24
YoutubeDLSharp is a wrapper for the command-line video downloaders youtube-dl and yt-dlp. In versions starting from 1.0.0-beta4 and prior to 1.1.2, an unsafe conversion of arguments allows the injection of a malicious commands when startin…
- CVE-2026-121931CRITICALCVSS 9.1EG 9.12026-11-04
A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute_ip leads…
- CVE-2026-121930CRITICALCVSS 9.1EG 9.12026-11-04
A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of the argument ping_ip causes os command injection. The attac…
- CVE-2026-120229CRITICALCVSS 9.1EG 9.12026-11-01
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carrie…
- CVE-2026-116505CRITICALCVSS 9.1EG 9.12026-10-26
A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address …
- CVE-2026-105014CRITICALCVSS 9.1EG 9.12026-10-22
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
- CVE-2026-107202CRITICALCVSS 9.1EG 9.12026-10-07
A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper validation of the listen configuration field. When an authenticated administrator submits a value containing shell metachar…
- CVE-2026-102794CRITICALCVSS 9.1EG 9.12026-09-29
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url leads to command injection. It is possible to launch the attack…
- CVE-2026-102793CRITICALCVSS 9.1EG 9.12026-09-29
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This manipulation of the argument hostname/zonename causes command injection. It is possi…
- CVE-2026-102792CRITICALCVSS 9.1EG 9.12026-09-29
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetwork/set_syslog. The manipulation of the argument conloglevel/log_size results in command injection. The attack may be p…
- CVE-2026-101264CRITICALCVSS 9.1EG 9.12026-09-28
A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/set_passwd. This manipulation of the argument password1 causes command injection. The attack can be initiated remotely…
- CVE-2026-101263CRITICALCVSS 9.1EG 9.12026-09-28
A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/set_online_client. The manipulation of the argument mac results in command injection. It is possible to launch the a…
- CVE-2026-101262CRITICALCVSS 9.1EG 9.12026-09-28
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the …
- CVE-2026-101261CRITICALCVSS 9.1EG 9.12026-09-28
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup_wifi. Executing a manipulation of the argument login_pwd can lead to command injection. The attack may be performed fro…
- CVE-2026-101260CRITICALCVSS 9.1EG 9.12026-09-28
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The …
- CVE-2026-101187CRITICALCVSS 9.1EG 9.12026-09-28
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the…
- CVE-2026-101008CRITICALCVSS 9.1EG 9.12026-09-28
A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the component File Merge Handler. Performing a manipulation of the argument split_file_path …
- CVE-2026-94098CRITICALCVSS 9.1EG 9.12026-09-21
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERY_STRING l…
- CVE-2026-93958CRITICALCVSS 9.1EG 9.12026-09-20
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can…
- CVE-2026-20176CRITICALCVSS 9.1EG 9.12026-09-16
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged …
- CVE-2026-92398CRITICALCVSS 9.1EG 9.12026-09-16
A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name …
- CVE-2026-92397CRITICALCVSS 9.1EG 9.12026-09-16
A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to …
- CVE-2026-76675CRITICALCVSS 9.1EG 9.12026-09-15
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlyin…
- CVE-2026-90847CRITICALCVSS 9.1EG 9.12026-09-15
A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the atta…
- CVE-2026-90703CRITICALCVSS 9.1EG 9.12026-09-14
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be la…
- CVE-2026-90702CRITICALCVSS 9.1EG 9.12026-09-14
A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit…
- CVE-2026-86151CRITICALCVSS 9.1EG 9.12026-09-05
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. …
- CVE-2026-86149CRITICALCVSS 9.1EG 9.12026-09-05
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be init…
- CVE-2026-86148CRITICALCVSS 9.1EG 9.12026-09-05
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injectio…
- CVE-2026-85224CRITICALCVSS 9.1EG 9.12026-09-03
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command inj…
- CVE-2026-85222CRITICALCVSS 9.1EG 9.12026-09-03
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On Center. Such manipulation of the argument f_name/f_url/f_fl…
- CVE-2026-82691CRITICALCVSS 9.1EG 9.12026-08-31
A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_device.cgi of the component CGI Handler. Such manipulation of t…
Map vulnerabilities like CWE-77 to your infrastructure
EchelonGraph correlates every CVE — across CWE-77 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →