Cisco Expressway microsoftware gateway Command Execution

The vulnerability in the database service of the Cisco Expressway gateway software relates to the use of persistent cookie files. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands...

CVE-2026-112352: Reliance on Cookies without Validation and Integrity Checking

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection...

Eclipse ioFog Operator command injection vulnerability

Versions 1.0.0 through 3.7.0 and versions 3.8.0-rc.1 through 3.9.1 of the Eclipse ioFog Operator contain a command injection vulnerability. This vulnerability arises because the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands, allowing...

Tanium Certificate Manager command injection vulnerability

Versions 1.17 through 1.17.417, 1.18 through 1.18.368, and 1.22 through 1.22.119 of the Tanium Certificate Manager contain a command injection vulnerability. This vulnerability stems from command injection issues and may lead to unauthorized code execution...

Kevin Poorman Salesforce CLI MCP Server command injection vulnerability

Kevin Poorman: The Salesforce CLI MCP Server versions 1.3.2 and earlier contain a command injection vulnerability. This vulnerability arises because escapeValue fails to neutralize backticks, $, and other shell metacharacters, allowing attackers to supply specially crafted flags for the Salesforc...

Hitachi Energy CoreTec 5 command injection vulnerability

Versions 5.3.0 through 5.0.0 of Hitachi Energy CoreTec and versions 3.0.0 through 3.4.0 of CoreTec contain a command injection vulnerability. This vulnerability arises because the configuration daemon’s time synchronization handler, when processing updates to timezone configurations, concatenates...

Apache Airflow SSH provider command injection vulnerability

Versions of the Apache Airflow SSH provider prior to 7.0.1 contain a command injection vulnerability. This vulnerability arises because the SSHRemoteJobOperator references the value of the templated environment parameter only once; this value resides within a wrapped script that has already been...

AI-SDLC Framework command injection vulnerability

The AI-SDLC Framework versions 0.31.2 and earlier contain a command injection vulnerability. This vulnerability arises because an unvalidated “repo” parameter is inserted into commands such as gh issue view or gh pr view executed via execSync. Attackers can exploit this by providing shell...

SuperMicro MBD-X12SPI command injection vulnerability

The SuperMicro MBD-X12SPI version 01.07.20 contains a command injection vulnerability. This vulnerability arises because IPMI authentication administrators can execute commands on the BMC using the operating system root user...

Igor Udot esp-mcp command injection vulnerability

Versions 28afddf and earlier of Igor Udot’s esp-mcp commit contain a command injection vulnerability. This vulnerability stems from improper handling of shell metacharacters in the target, port, projectpath, or projectname parameters passed to asyncio.createsubprocessshell. It may allow attackers...

CVE-2026-104353: Improper Neutralization of Special Elements used in an OS Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execu...

PT-2026-126418

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.run shell or...

PT-2026-125549

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

MiracleLinux 9 : lrzsz-0.12.20-58.el9_8 (AXSA:2026-2168:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2168:02 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

Redis < 7.2.14 / 7.4.x < 7.4.9 / 8.2.x < 8.2.6 / 8.4.x < 8.4.3 / 8.6.x < 8.6.3 / 8.8.x < 8.8-RC1 Multiple Vulnerabilities

The version of Redis installed on the remote host is prior to 7.2.14, or 7.4.x prior to 7.4.9, or 8.2.x prior to 8.2.6, or 8.4.x prior to 8.4.3, or 8.6.x prior to 8.6.3, or 8.8.x prior to 8.8-RC1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in...

Stefanie Jane DroidMind command injection vulnerability

Stefanie Jane DroidMind versions 0.4.0 and earlier contain a command injection vulnerability. This vulnerability arises because the MCP client can bypass the shell command allow list by using $... or backticks. Attackers can inject commands by providing parameters to Device.runshell or unvalidate...

Google Chrome Vulnerability: CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Hitachi HiRDB command injection vulnerability

Hitachi HiRDB versions from 10-00 through 10-12-01, HiRDB Server Version 9 from version 09-00 through 09-66-22, HiRDB Server with Additional Function Version 9 from version 09-00 through 09-66/V, HiRDB Server Version 932 from version 09-02 through 09-66-22, and HiRDB Server with Additional Functi...

PT-2026-125894

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands...

Adobe Campaign Classic command injection vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain a command injection vulnerability. This vulnerability stems from improper handling of special elements within OS commands, potentially allowing low-privilege attackers to execute arbitrary code within the context of the current...