#Argument Injection
All CosmicBytez Labs articles tagged #Argument Injection, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-108929: Netcore NR268 Router DDNS Argument Injection
A CVSS 9.9 argument injection flaw in Netcore NR268 router firmware lets remote attackers hijack the DDNS Hostname field to run arbitrary commands.
- Security
CVE-2026-107510: Infoblox NIOS Argument Injection Enables Privilege Escalation
Infoblox NIOS lets authenticated high-privilege users inject arguments into troubleshooting commands, escalating to full administrative control.
- Security
Critical Argument Injection in Fireshare Lets Attackers Overwrite Files
CVE-2026-54337 lets unauthenticated attackers inject ffmpeg arguments via Fireshare's video upload endpoint to write or overwrite arbitrary files.
- Security
CVE-2026-40047: Apache Camel Docling Argument Injection Enables OS Command Execution
A critical argument injection vulnerability in Apache Camel's camel-docling component allows attackers to inject arbitrary CLI arguments into the docling...
- Security
CVE-2026-47365: WordPress Toolkit Argument Injection in cPanel & WHM
A critical CVSS 9.9 argument injection vulnerability in WordPress Toolkit before 6.11.0 allows remote authenticated users to bypass cross-tenant...