#OS Command Injection
All CosmicBytez Labs articles tagged #OS Command Injection, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-108895: Linksys E1700 setDMZ OS Command Injection
A public exploit targets Linksys E1700 routers via the setDMZ goform handler, letting remote attackers inject OS commands through the MAC_addr parameter.
- Security
CVE-2026-108896: Linksys E1700 setLinksysIpv6 OS Command Injection
The Linksys E1700's IPv6 configuration handler injects the 6rd_prefix parameter into a shell command, letting remote attackers run arbitrary code.
- Security
CVE-2026-108576: Unauthenticated OS Command Injection in TOZED X300 Router (CVSS 10.0)
A maximum-severity flaw in TOZED X300 firmware ≤ 6.01.3 lets unauthenticated attackers inject OS commands via the IPPingDiagnostics Host field.
- Security
CVE-2026-108540: Critical OS Command Injection in OpenSpug Spug's File Transfer Component
OpenSpug Spug through 4.0.1 lets attackers inject OS commands via /exec/transfer, with public PoC exploit code and CVSS 9.9.
- Security
CVE-2026-105110: Iskratel Innbox GPON ONT Unauthenticated OS Command Injection
Unauthenticated OS command injection in Iskratel Innbox GPON ONT's login.xgi endpoint lets remote attackers execute commands as root.
- Security
CVE-2026-107780: Unauthenticated OS Command Injection in Dromara Skyeye TTS Endpoint
Unauthenticated OS command injection in Dromara Skyeye's TTS endpoint lets attackers break out of a PowerShell string via the format parameter for RCE.
- Security
CVE-2026-102911: Critical OS Command Injection in pi-llm-wiki's MCP Capture Tool
Critical CVSS 9.9 OS command injection in pi-llm-wiki's wiki_capture_source MCP tool via the url argument; fixed in v0.11.8.
- Security
CVE-2026-101001: Netcore NBR200V2 Web Management Interface OS Command Injection via network_tools
Unauthenticated OS command injection in Netcore NBR200V2's network_tools CGI handler via QUERY_STRING gives remote attackers root-level code execution.
- Security
CVE-2026-101002: Netcore NBR200V2 Tools Ping Handler OS Command Injection
Netcore NBR200V2's Ping diagnostic tool injects an unsanitized url argument into a system() call, enabling remote command injection.
- Security
CVE-2026-90699: D-Link DWR-M920 OS Command Injection via PIN Manage Setup
D-Link DWR-M920 1.1.7 lets remote attackers inject OS commands through the formPinManageSetup handler; a public exploit is already available.
- Security
CVE-2026-90702: D-Link DWR-M921 OS Command Injection via Disk Format Handler
D-Link DWR-M921 1.1.52 lets remote attackers inject OS commands through the formDiskFormat handler; a public exploit is already available.
- Security
CVE-2026-90703: D-Link DWR-M921 OS Command Injection via Disk Share Handler
D-Link DWR-M921 1.1.52 lets remote attackers inject OS commands through the formDiskCreateShare handler; a public exploit is already available.
- Security
CVE-2026-86148: Tenda CP3 OS Command Injection via AlarmVoiceURL
A critical unauthenticated OS command injection flaw in Tenda CP3 Wi-Fi cameras lets remote attackers run arbitrary commands via the AlarmVoiceURL parameter.
- Security
CVE-2026-86149: Tenda CP3 OS Command Injection via NetCheckPing
A second critical command injection flaw in Tenda CP3 cameras lets remote attackers execute OS commands through the ping utility's host/interface argument.
- Security
CVE-2026-86152: Max-Severity Tenda CP3 Command Injection via AutoAddWifi
CVSS 10.0 flaw in Tenda CP3's Kylin AutoAddWifi thread lets remote attackers inject and execute arbitrary OS commands.
- Security
CVE-2026-86151: Tenda CP3 OS Command Injection via Network Config Handler
Tenda CP3 firmware 27.5.57.101 lets remote attackers inject OS commands through its network configuration handler, no authentication noted.
- Security
Tenda HG10 formgponConf Flaw Allows Unauthenticated Root Command Injection
A near-maximum-severity OS command injection in Tenda HG10's formgponConf function lets attackers run root commands remotely; no patch is available.
- Security
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
A post-auth OS command injection in the SMA1000 Management Console, chained with a pre-auth SSRF flaw, gives attackers unauthenticated root-level RCE.
- Security
CVE-2026-37751: Critical Command Injection in AI Maestro
A CVSS 9.8 OS command injection in AI Maestro's session-kill function lets attackers run arbitrary commands on self-hosted orchestrator hosts.
- Security
CVE-2026-82082: Critical Unauthenticated OS Command Injection in NUMail
Unauthenticated OS command injection in Green-Computing's NUMail lets remote attackers run arbitrary commands on the mail server. CVSS 9.8.
- Security
CVE-2026-63586: Unauthenticated Root RCE in Weidmueller IE-SR-2TX-WL Industrial Routers
Critical OS command injection via the HTTP Basic Auth username lets unauthenticated attackers run root commands on Weidmueller security routers.
- Security
CVE-2026-73570: Zimbra ZCS OS Command Injection via SMTP
Zimbra Collaboration Suite contains a critical unauthenticated OS command injection flaw allowing RCE as the Zimbra user via crafted SMTP requests.
- Security
CVE-2026-15511: Critical OS Command Injection in Comfast CF-WR631AX Router
A CVSS 9.8 critical OS command injection vulnerability in the Comfast CF-WR631AX V3 router allows unauthenticated network-adjacent attackers to execute...
- Security
CVE-2026-49814: Dell PowerProtect Data Domain OS Command Injection
A high-severity OS command injection vulnerability in Dell PowerProtect Data Domain allows authenticated remote attackers to execute arbitrary commands...
- Security
CVE-2026-46735: Dell DDPM Mac OS Command Injection Allows Local Privilege Escalation
A high-severity OS command injection flaw in Dell Display and Peripheral Manager for macOS (versions prior to 2.3) allows low-privileged local attackers...
- Security
CVE-2026-9862: Fortra BoKS OS Command Injection — CVSS 9.8 RCE
Critical OS command injection in Fortra Core Privileged Access Manager allows unauthenticated remote code execution via the boks_autoregisterd service at...
- Security
CVE-2026-10520: Ivanti Sentry OS Command Injection — CVSS 10.0
A maximum-severity OS command injection vulnerability in Ivanti Sentry allows unauthenticated remote attackers to achieve root-level code execution. Patch...
- Security
CVE-2026-36576: Critical OS Command Injection in docker-wkhtmltopdf-aas
A CVSS 9.8 OS command injection vulnerability in openlabs docker-wkhtmltopdf-aas allows unauthenticated remote code execution via a crafted POST request to…
- Security
CVE-2026-4408: Samba OS Command Injection via Check Password Script
A CVSS 9.0 OS command injection flaw in Samba allows remote attackers to execute arbitrary commands on file servers and domain controllers using the %u...
- Security
CVE-2026-8450: HTTP::Daemon Perl OS Command Injection via send_file()
OS command injection (CVSS 9.1) in Perl's HTTP::Daemon lets attackers run arbitrary commands via magic prefix abuse in send_file's two-arg open().
- Security
CVE-2026-27130 — Dokploy OS Command Injection via appName
Dokploy versions 0.26.6 and below contain a critical OS command injection vulnerability in the appName parameter, enabling unauthenticated remote code...
- Security
CVE-2026-8153: Universal Robots PolyScope OS Command
A critical OS command injection flaw in Universal Robots PolyScope Dashboard Server (CVSS 9.8) allows unauthenticated attackers to execute arbitrary...
- Security
CVE-2026-7136: Totolink A8000RU OS Command Injection via setDmzCfg
A critical OS command injection vulnerability in the Totolink A8000RU router allows remote attackers to execute arbitrary commands by manipulating the...
- Security
CVE-2026-7154: Totolink A8000RU OS Command Injection via CGI Handler
A critical unauthenticated OS command injection vulnerability in the Totolink A8000RU router firmware 7.1cu.643_b20200521 allows remote attackers to...
- Security
CVE-2026-5965: NewSoftOA Critical OS Command Injection
A critical OS command injection vulnerability in NewSoftOA by NewSoft allows unauthenticated local attackers to inject and execute arbitrary OS commands...
- Security
CVE-2026-5977: TOTOLINK A7100RU Critical OS Command
A critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary system...
- Security
CVE-2026-5978: TOTOLINK A7100RU Critical OS Command
A second critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-30303 — Axon Code OS Command Injection via Whitelist Bypass
The command auto-approval module in Axon Code contains an OS Command Injection vulnerability. An incompatible Unix-based shell-quote parser is used on...
- Security
CVE-2026-33478: AVideo CloneSite Plugin Unauthenticated RCE
A critical chain of vulnerabilities in WWBN AVideo's CloneSite plugin allows fully unauthenticated attackers to achieve remote code execution via key...
- Security
CVE-2026-32298: Angeet ES3 KVM OS Command Injection via cfg.lua Script
A high-severity OS command injection vulnerability (CVSS 9.1) in the Angeet ES3 KVM switch allows authenticated attackers to execute arbitrary OS-level...