CVE-2026-16521 Supermicro BMC's syslog feature contains a command injection vulnerability

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

CVE-2026-111461

An OS command injection vulnerability exists in the OnCell G3150A-LTE Series . When SMS management functionality is enabled and configured, an attacker with the required privileges can exploit insufficient input validation to execute arbitrary commands on the affected device. The root cause is an...

CVE-2026-111461 SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

EUVD-2026-110620

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...

MGASA-2026-0555 Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...

CVE-2026-109680

A flaw was found in FreeRDP. A heap-based buffer overflow can result in a Denial of Service DoS when handling redirected user credentials. A malicious or compromised routing service can supply an excessively long redirected username, causing memory corruption in the command-line prompt buffer whe...

CVE-2026-116576

A flaw was found in systeminformation. On Windows systems, the library's input sanitization removes standard quotation marks but fails to filter Unicode quotation marks when constructing PowerShell commands. An attacker who can supply input to an application using this library can exploit this fl...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116838

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices . A malicious actor can lure an authenticated user to a malicious page to trigger the CSRF, which can then be used to execute Command Injection on the device. No specific remediation or exploit details are provided in th...

EUVD-2026-110578

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

Command Injection

Overview apache-airflow-providers-ssh is a Provider package apache-airflow-providers-ssh for Apache Airflow Affected versions of this package are vulnerable to Command Injection via the buildposixwrappercommand function in remotejob.py, where environment variable values passed to...

EUVD-2026-110536

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

CVE-2026-111422

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

SMCI MBD-X12STW-F command injection vulnerability

The SMCI MBD-X12STW-F version 01.02.08 contains a command injection vulnerability. This vulnerability stems from insufficient input filtering; attackers can inject command payloads into BMC functionality. When relevant services restart, these payloads may be executed, resulting in OS command...

PT-2026-126430

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent arduino and hagent esp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

Google Chrome input validation error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Command component, allowing remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Tanium Certificate Manager command injection vulnerability

Versions 1.17 through 1.17.417, 1.18 through 1.18.368, and 1.22 through 1.22.119 of the Tanium Certificate Manager contain a command injection vulnerability. This vulnerability stems from command injection issues and may lead to unauthorized code execution...

Mistral AI Mistral Vibe software supply chain issue vulnerability

Versions of Mistral AI Mistral Vibe prior to 3.0.3 contain a software supply chain vulnerability. This vulnerability stems from a git filter driver defined in the .git/config file within an untrusted repository. When launched with --worktree, git worktree add applies .gitattributes and executes...