CVE-2026-8227

CVE-2026-8227 affects Wavlink NU516U1 240425. The vulnerability is in the function wzdapMesh of the file /cgi-bin/adm.cgi, enabling an OS command injection. It may be exploited remotely, with exploits publicly available. Multiple sources (NVD, Red Hat, EUVD/ENISA, CIRCL, CVE records) corroborate ...

CVE-2026-8227 Wavlink NU516U1 adm.cgi wzdapMesh os command injection

A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. T...

PT-2026-39552

Name of the Vulnerable Software and Affected Versions Tenda AC6 2.0 version 15.03.06.23 Description An OS command injection issue exists in the httpd component within the '/goform/telnet' file. This occurs when the lan.ip argument is manipulated, allowing for remote exploitation. Recommendations ...

CVE-2026-8230: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function syslogin1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Th...

CVE-2026-8227: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. T...

CVE-2026-8217: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. T...

MiniClaw 命令注入漏洞

MiniClaw is an AI memory and evolution tool developed by a personal developer. Versions 0.8.0 and 0.9.0 of MiniClaw contain command injection vulnerabilities. These vulnerabilities stem from the function resolveSkillScriptPath in the System Command Handler component’s src/kernel.ts file, which...

CVE-2026-8235: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is...

CVE-2026-8228: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlanconf/Channel/skiplist/ieee80211h leads to os command injection. The attack may be launched remotely. The exploit has been...

CVE-2026-8229: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is...

PT-2026-39463

Name of the Vulnerable Software and Affected Versions 8421bit MiniClaw versions 0.8.0 through 0.9.0 Description An OS command injection issue exists within the System Command Handler component. The flaw is located in the resolveSkillScriptPath function of the src/kernel.ts file, where improper...

CVE-2026-8192

CVE-2026-8192 affects Wavlink NU516U1 M16U1_V240425. The vulnerability resides in the wzdap functionality of /cgi-bin/adm.cgi where manipulating EncrypType/wl_Pass leads to OS command injection. Attackers can exploit remotely; multiple sources indicate the exploit is publicly available. Connected...

CVE-2026-8191 Wavlink NU516U1 adm.cgi wifi_region os command injection

A vulnerability was identified in Wavlink NU516U1 M16U1V240425. This affects the function wifiregion of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might ...

CVE-2026-8191

The CVE-2026-8191 vulnerability affects Wavlink NU516U1 M16U1_V240425, specifically the wifi_region function in /cgi-bin/adm.cgi. Manipulation of the arguments skiplist1/skiplist2 enables remote command injection, with the exploit described as publicly available. Multiple sources (NVD, Red Hat, E...

CVE-2026-8189 Wavlink NU516U1 adm.cgi wzdrepeater os command injection

A vulnerability was found in Wavlink NU516U1 M16U1V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlanbssid/selAutomode/selEncrypTyp results in os command injection. It is possible to launch the attack remotely. Th...

CVE-2026-8189

CVE-2026-8189 affects Wavlink NU516U1 M16U1_V240425. The vulnerability is in the function wzdrepeater of the file /cgi-bin/adm.cgi . Manipulating the arguments wlan_bssid/sel_Automode/sel_EncrypTyp results in OS command injection , allowing remote exploitation. The exploit has been publicly discl...

EUVD-2026-28915

A vulnerability has been found in Wavlink NU516U1 M16U1V240425. Affected is the function changewifipassword of the file /cgi-bin/adm.cgi. The manipulation of the argument wlchannel/wlPass/EncrypType leads to os command injection. It is possible to initiate the attack remotely. The exploit has bee...

GHSA-V6WJ-C83F-V46X @profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module

Security Advisory: OS Command Injection in profullstack/mcp-server domainlookup Module Field | Value -- | -- Project | profullstack/mcp-server Repository | https://github.com/profullstack/mcp-server Affected Commit | 2e8ea913573610667ad54e31dba2e8198ebf7cf9 Affected Module | mcpmodules/domainlook...

@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module

Security Advisory: OS Command Injection in profullstack/mcp-server domainlookup Module Field | Value -- | -- Project | profullstack/mcp-server Repository | https://github.com/profullstack/mcp-server Affected Commit | 2e8ea913573610667ad54e31dba2e8198ebf7cf9 Affected Module | mcpmodules/domainlook...

CVE-2026-8191: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in Wavlink NU516U1 M16U1V240425. This affects the function wifiregion of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might ...