PT-2026-126426

Name of the Vulnerable Software and Affected Versions esp-mcp versions prior to commit 28afddf Description An OS command injection flaw exists where attackers can execute arbitrary commands by providing shell metacharacters within MCP tool parameters. This occurs when values for target, port,...

PT-2026-126420

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue in src/utils.ts fails to neutralize backticks, $ substitution, and other shell metacharacters,...

SuperMicro MBD-X12SPI processing error vulnerability

SuperMicro MBD-X12SPI version 1.07.20 contains a logic error vulnerability. This flaw stems from defects in the BMC RAKP+ implementation, potentially allowing attackers to send requests and subsequently send specially crafted RAKP messages to establish an RMCP+ session, thereby executing commands...

SuperMicro MBD-X12SPI authorization issue vulnerability

The SuperMicro MBD-X12SPI version 01.07.20 contains an authorization issue vulnerability. This vulnerability stems from BMC’s failure to properly enforce IPMI command integrity and encryption requirements, potentially allowing attackers to craft packets that execute arbitrary commands within acti...

PT-2026-126699

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execu...

CVE-2026-102814: Improper Neutralization of Special Elements used in an OS Command

An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...

JetBrains Junie CLI input validation error vulnerability

Versions of JetBrains Junie CLI prior to 26.8.17 contain an input validation error vulnerability. This vulnerability stems from incomplete validation of whitelist commands and may lead to command execution...

Micro Architecture at Santa Cruz agent command injection vulnerability

Micro Architecture at Santa Cruz: Command injection vulnerability exists in hagent 761eec6 and earlier versions. This vulnerability arises because the MCP client can inject metacharacters into the args parameter of hagentarduino and hagentesp32 tools. Special parameters are then interpolated into...

PLANET IGS-5225-8P2T4S OS Command Injection (CVE-2026-81942)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

Collabora Online built-in CODE server command injection

Added: 10/27/2026 Background Collabora Online is an online document editing suite. Collabora Online Development Edition CODE is the development version of Collabora Online. Problem The Collabora Online built-in CODE server contains a command injection vulnerability in proxy.php which is exploitab...

Dell PowerProtect Data Domain Virtual Edition command injection vulnerability

Versions 7.7.1.0 through 8.7, LTS2024 versions 7.13.1.0 through 7.13.1.70, LTS2025 versions 8.3.1.0 through 8.3.1.30, and LTS2026 versions 8.6.1.0 through 8.6.1.10 are affected by a command injection vulnerability. This vulnerability stems from a process control issue, and high-privilege attacker...

Alishahid74 Kali GPT command injection vulnerability

Alishahid74: Kali GPT versions a608c74 and earlier contain a command injection vulnerability. This flaw arises because the executetool function in kaligpt/tools/mcpserver.py fails to sanitize the scanner parameter, potentially allowing OS command injection. Attackers can embed shell metacharacter...

Ubiquiti airMAX M cross-site request forgery vulnerability

Versions of Ubiquiti airMAX M prior to 6.3.26 contain a cross-site request forgery vulnerability. This vulnerability allows attackers to trick authenticated users into visiting malicious pages, potentially leading to command injection on the device...

Atlantis command injection vulnerability

Versions 0.4.0 through 0.47.1 of Atlantis contain a command injection vulnerability. This vulnerability arises when values controlled by fetch requests in atlantis.yaml are concatenated into Terraform command parameters and executed via sh -c. Authenticated contributors can inject shell...

ATXP command injection vulnerability

Versions 1.0.0 and earlier of ATXP contain a command injection vulnerability. This flaw arises because the runAtxp function fails to sanitize parameters passed to the MCP tool. Attackers can exploit this by replacing $ or backticks within email or SMS content, thereby injecting values into...

TP-Link RE305 command injection vulnerability

The TP-Link RE305 V3 running firmware versions prior to 1.1.8 Build 20260921 Rel. 42853 contain a command injection vulnerability. This vulnerability stems from an operating system command injection flaw in the tmpServer service, which runs with root privileges and listens on the local loopback...

CVE-2026-117511: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection. The attack can be executed remotely. The...

CVE-2026-102815: Improper Neutralization of Special Elements used in an OS Command

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...

PT-2026-126419

Name of the Vulnerable Software and Affected Versions ATXP Gemini CLI extension versions prior to 1.0.1 Description An OS command injection issue exists in the runAtxp function. The software fails to sanitize MCP tool parameters, allowing attackers to execute shell commands as the user. This can ...

PT-2026-126427

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $, backticks or a closing double quote in an...