CVE-2026-111218 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a...

CVE-2026-111217

Netgate pfSense CE versions through 2.9.0 are vulnerable to an OS command injection flaw. The vulnerability arises from the storage of an unvalidated CARP VHID , which allows authenticated users with Virtual IP edit privileges to execute commands as root . Attackers can provide a VHID containing ...

CVE-2026-111218

Netgate pfSense CE 2.7.0 through 2.9.0 is vulnerable to an OS command injection vulnerability within the Traffic Shaper Limiters . Authenticated users possessing Traffic Shaper Limiters privileges can execute commands as root by tampering with the limiter number field . The flaw occurs because th...

CVE-2026-111216

Netgate pfSense CE through version 2.9.0 is vulnerable to an OS command injection vulnerability. Authenticated users with gateway edit privileges can execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. The root cause is that the start_dpinger() function ...

CVE-2026-111215 Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;...

EUVD-2026-102327

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;...

CVE-2026-111214 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a crafted 'if' value, then edit the QinQ entry so it is interpolated...

CVE-2026-111215

Netgate pfSense CE through version 2.9.0 is vulnerable to an OS command injection flaw. The vulnerability exists because the interface_wireless_clone() function interpolates unescaped input into an ifconfig shell command. Authenticated users with limited Wireless Edit or Interface Assignments pri...

CVE-2026-111214

Netgate pfSense CE versions 2.7.0 through 2.9.0 are vulnerable to an OS command injection flaw within the interfaces_qinq_edit.php component. The root cause is the storage of an unvalidated parent interface name . An authenticated user with QinQ edit privileges can save a crafted 'if ' value; whe...

CVE-2025-57457

OS Command Injection in CURO UC300 IP Phone An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter. PoC: https://github.com/restdone/CVE-2025-57457/blob/main/oscommandinject.mp4 Step...

CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell. "The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to...

CVE-2026-26831

CVE-2026-26831: OS command injection in textract Summary textract through version 2.5.0 allows OS command injection through the file path supplied to multiple extractors. Several code paths pass that file path into childprocess.exec with inadequate sanitization. An attacker who can influence the...

poc-yaws-cgi-shell-injection

OS command injection in Yaws web server CVE-2020-24916 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:shell-injection-appmod-cgi curl...

CVE-2026-45449

: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

Astra Linux – Vulnerability in Node.js

A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...

EUVD-2026-102133

: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

CVE-2026-45449

The Unitronics UniStream Pro/UniLogic systems are vulnerable to an OS Command Injection (CWE-78) vulnerability. This flaw is caused by the improper neutralization of special elements used in an OS command. The issue specifically affects Unitronics UniStream Pro versions only (B10 / C10) and UniLo...

CVE-2026-45449 Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

CVE-2026-23500

CVE-2026-23500: OS Command Injection RCE via MAINODTASPDF configuration in Dolibarr Overview Field| Details ---|--- CVE ID| CVE-2026-23500 Severity| CRITICAL Advisory| GHSA-w5j3-8fcr-h87w Discovered by| Lukasz Rybak Affected Products Dolibarr/dolibarr versions: = 22.0.4 Patched in: 23.0 CWE...

CVE-2026-110957

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2V250604. The affected element is the function sub12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTEADDR leads to os command injection. It is possible to initiate the attack...