CWE-78
High likelihoodImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
6,224 vulnerabilities with CWE-78
CVE-2026-45662
HIGH
Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion)
CVSS 8.8
CVE-2026-45578
HIGH
WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URL
CVSS 8.8
CVE-2026-9645
CRITICAL
ScadaBR Authenticated Remote Code Execution
CVSS 9.9
CVE-2026-44466
HIGH
Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
CVSS 8.6
CVE-2026-44465
HIGH
Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
CVSS 8.6
CVE-2026-44463
HIGH
Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
CVSS 8.6
CVE-2026-44461
HIGH
Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)
CVSS 8.6
CVE-2026-4408
CRITICAL
Samba: remote code execution in samr
CVSS 9.0
CVE-2026-44604
HIGH
Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command
CVSS 7.0
CVE-2026-45322
HIGH
OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON
CVSS 7.8
CVE-2026-9208
HIGH
Tanium addressed an unauthorized code execution vulnerability in Connect.
CVSS 8.8
CVE-2026-45152
HIGH
uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution
CVSS 7.8
CVE-2026-45136
HIGH
claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh
CVSS 7.8
CVE-2026-44713
HIGH
pam_usb: Command injection via $TMUX environment variable leads to RCE as root
CVSS 8.8
CVE-2026-44712
HIGH
pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent
CVSS 8.2
CVE-2026-44709
HIGH
pam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution
CVSS 7.8
CVE-2026-44724
HIGH
systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
CVSS 7.8
CVE-2026-44590
CRITICAL
Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml
CVSS 9.3
CVE-2026-45087
CRITICAL
Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode
CVSS 10.0
CVE-2026-44346
HIGH
BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml
CVSS 8.8
CVE-2026-44345
HIGH
BentoML: Dockerfile command injection via docker.base_image
CVSS 8.8
CVE-2026-36045
HIGH
picoclaw <=v0.1.2 - OS Command Injection via ExecTool Component
CVSS 7.3
CVE-2026-36044
HIGH
@pensar/apex <= 0.0.58 - OS Command Injection via smart_enumerate Tool
CVSS 8.8
CVE-2026-40852
HIGH
MB connect line mbNET/mbNET.rokey - Command Injection via Malicious Configuration
CVSS 7.2
CVE-2026-8450
CRITICAL
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
CVSS 9.1
Details
Vulnerabilities
6,224
Exploit Likelihood
High