On this page
Atomicorp WAF Rule 340193
Rule Summary
- Rule ID: 340193
- Status: Active
- Alert message: Atomicorp.com WAF Rules: CMD injection in URI
- Observed CWEs: CWE-20 (13), CWE-22 (10), CWE-59 (1), CWE-73 (4), CWE-74 (23), CWE-77 (40), CWE-78 (143), CWE-79 (7), CWE-88 (2), CWE-89 (6), CWE-93 (1), CWE-94 (57), CWE-95 (6), CWE-96 (1), CWE-98 (1), CWE-120 (1), CWE-121 (2), CWE-184 (2), CWE-200 (2), CWE-250 (2), CWE-269 (1), CWE-276 (2), CWE-284 (3), CWE-285 (1), CWE-287 (1), CWE-288 (2), CWE-306 (6), CWE-350 (1), CWE-352 (2), CWE-361 (1), CWE-362 (1), CWE-434 (13), CWE-470 (5), CWE-502 (15), CWE-639 (2), CWE-641 (1), CWE-693 (4), CWE-732 (1), CWE-787 (1), CWE-791 (1), CWE-798 (1), CWE-835 (1), CWE-862 (4), CWE-863 (3), CWE-915 (1), CWE-918 (2), CWE-1336 (2), CWE-1392 (1)
- Revision: 17
- Rule severity: Critical (2)
- Phase: 2 (request body)
- Request surfaces: Request URI
- Rule action: deny
- HTTP status: 403
- Public tags: Command Injection
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “CMD injection in URI” in the request URI. It evaluates during the request body phase and denies matching traffic with HTTP status 403.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2008-5448 | Oracle Secure Backup exec_qr() Command Injection Vulnerability | secure backup | 10.0 (v2.0) | High |
| CVE-2009-1977 | Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability | secure backup | 10.0 (v2.0) | High |
| CVE-2025-34030 | sar2html <=3.2.2 Plot Parameter - Remote Code Execution | sar2html | 10.0 (v4.0) | Critical |
| CVE-2025-34037 | Linksys E-Series TheMoon Remote Command Injection | E4200 | 10.0 (v4.0) | Critical |
| CVE-2026-100382 | Unauthenticated remote code execution through wikitext in ExternalData | Mediawiki - ExternalData Extension | 10.0 (v4.0) | Critical |
| CVE-2026-105134 | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection | cloud backup suite | 10.0 (v4.0) | Critical |
| CVE-2026-108576 | TOZED X300 IPPingDiagnostics process_ping os command injection | X300 | 10.0 (v4.0) | Critical |
| CVE-2026-41900 | OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment | openlearnx | 10.0 (v3.1) | Critical |
| CVE-2026-45829 | ChromaDB Deserialization of Untrusted Data Vulnerability | ChromaDB | 10.0 (v4.0) | Critical |
| CVE-2026-49869 | Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in AuthenticationFilter | kestra | 10.0 (v3.1) | Critical |
| CVE-2026-7411 | Eclipse BaSyx Arbitrary Code Execution Vulnerability | Eclipse BaSyx | 10.0 (v3.1) | Critical |
| CVE-2025-11539 | Arbitrary Code Execution in Grafana Image Renderer Plugin | grafana-image-renderer | 9.9 (v3.1) | Critical |
| CVE-2026-105697 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | langflow | 9.9 (v3.1) | Critical |
| CVE-2026-113708 | Argo CD: A Kustomize remote ref can run commands in the repo-server | argo-cd | 9.9 (v3.1) | Critical |
| CVE-2026-34038 | Coolify authenticated remote command injection leading to RCE and secret exfiltration | coolify | 9.9 (v3.1) | Critical |
| CVE-2026-34838 | Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in AbstractSettingsCollection | group-office | 9.9 (v3.1) | Critical |
| CVE-2026-42454 | Termix: OS Command Injection in Docker Container Management Endpoints | Termix | 9.9 (v3.1) | Critical |
| CVE-2026-45629 | Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint | dokploy | 9.9 (v3.1) | Critical |
| CVE-2026-55565 | Yamcs: Authenticated remote code execution via unescaped StreamSQL LIKE pattern compiled by Janino (LikeExpression) | yamcs | 9.9 (v3.1) | Critical |
| CVE-2026-72738 | Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter | dokploy | 9.9 (v3.1) | Critical |
| CVE-2026-72869 | Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE | dokploy | 9.9 (v3.1) | Critical |
| CVE-2026-72876 | Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.* | dokploy | 9.9 (v3.1) | Critical |
| CVE-2026-73294 | Semaphore U: OS Command Injection | semaphore | 9.9 (v3.1) | Critical |
| CVE-2013-2251 | Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution | archiva | 9.8 (v3.1) | Critical |
| CVE-2014-3206 | Seagate BlackArmor NAS - Command Injection | blackarmor nas 220 firmware | 9.8 (v3.0) | Critical |
| CVE-2015-8103 | Jenkins-CI Unauthenticated Script-Console Scanner | openshift container platform | 9.8 (v3.1) | Critical |
| CVE-2016-3087 | Apache Struts REST Plugin With Dynamic Method Invocation Remote Code Execution | struts | 9.8 (v3.0) | Critical |
| CVE-2016-7547 | Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution | threat discovery appliance | 9.8 (v3.0) | Critical |
| CVE-2016-7552 | Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution | threat discovery appliance | 9.8 (v3.0) | Critical |
| CVE-2017-12611 | Apache Struts2 S2-053 - Remote Code Execution | struts | 9.8 (v3.0) | Critical |
| CVE-2020-28188 | TerraMaster TOS 4.2.06 or lower - Unauthenticated Remote Code Execution | tos | 9.8 (v3.1) | Critical |
| CVE-2020-35476 | OpenTSDB Arbitrary Command Injection Remote Code Execution (CVE-2020-35476) | opentsdb | 9.8 (v3.1) | Critical |
| CVE-2021-20038 | SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution | sma 200 firmware | 9.8 (v3.1) | Critical |
| CVE-2021-22652 | Advantech iView Unauthenticated Remote Code Execution | iview | 9.8 (v3.1) | Critical |
| CVE-2021-32305 | Websvn <2.6.1 - Remote Code Execution | websvn | 9.8 (v3.1) | Critical |
| CVE-2022-2143 | Advantech iView NetworkServlet Command Injection | iview | 9.8 (v3.1) | Critical |
| CVE-2022-2486 | Wavlink WN535K2/WN535K3 - OS Command Injection | wl-wn535k2 | 9.8 (v3.1) | Critical |
| CVE-2022-2488 | Wavlink WN535K2/WN535K3 - OS Command Injection | wl-wn535k2 firmware | 9.8 (v3.1) | Critical |
| CVE-2022-29078 | Node.js Embedded JavaScript 3.1.6 - Template Injection | ejs | 9.8 (v3.1) | Critical |
| CVE-2022-42889 | Apache Commons Text RCE | commons text | 9.8 (v3.1) | Critical |
| CVE-2022-44276 | responsive filemanager Unrestricted Upload of File with Dangerous Type Vulnerability | responsive filemanager | 9.8 (v3.1) | Critical |
| CVE-2023-29827 | Embedded JavaScript(EJS) 3.1.6 - Template Injection | ejs | 9.8 (v3.1) | Critical |
| CVE-2023-42793 | JetBrains TeamCity Unauthenticated Remote Code Execution | teamcity | 9.8 (v3.1) | Critical |
| CVE-2023-46359 | cPH2 Charging Station v1.87.0 - OS Command Injection | cph2 echarge | 9.8 (v3.1) | Critical |
| CVE-2024-32641 | Masa CMS Vulnerable to Pre-Auth RCE via JSON API | masacms | 9.8 (v3.1) | Critical |
| CVE-2025-66401 | MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL | mcp watch | 9.8 (v3.1) | Critical |
| CVE-2026-104586 | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 Command Injection Vulnerability | - | 9.8 (v3.1) | Critical |
| CVE-2026-104798 | My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'a | My Calendar – Accessible Event Manager | 9.8 (v3.1) | Critical |
| CVE-2026-110392 | Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning | QA-Board | 9.8 (v3.1) | Critical |
| CVE-2026-116692 | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller- | mlflow | 9.8 (v3.1) | Critical |
| CVE-2026-12940 | Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoint | langflow | 9.8 (v3.1) | Critical |
| CVE-2026-19912 | Kaltura HTML5 Video Player, html5 library Arbitrary Code Execution Vulnerability | Kaltura HTML5 Video Player, html5 library | 9.8 (v3.1) | Critical |
| CVE-2026-3296 | Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder | 9.8 (v3.1) | Critical |
| CVE-2026-35847 | the CheckUils.php file Arbitrary Code Execution Vulnerability | the CheckUils.php file | 9.8 (v3.1) | Critical |
| CVE-2026-37281 | the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 Command Injection Vulnerability | the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 | 9.8 (v3.1) | Critical |
| CVE-2026-38428 | kestra SQL Injection Vulnerability | kestra | 9.8 (v3.1) | Critical |
| CVE-2026-3960 | Remote Code Execution in h2oai/h2o-3 | h2o | 9.8 (v3.1) | Critical |
| CVE-2026-46562 | Yamcs: Remote Code Execution via Mission Database algorithm override | yamcs | 9.8 (v3.1) | Critical |
| CVE-2026-53545 | Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection | Termix | 9.8 (v3.1) | Critical |
| CVE-2026-67827 | Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 Arbitrary Code Execution Vulnerability | - | 9.8 (v3.1) | Critical |
| CVE-2026-83627 | Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 9.8 (v3.1) | Critical |
| CVE-2026-84372 | Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections | predis | 9.8 (v3.1) | Critical |
| CVE-2026-88393 | WookTeam 1.6.6 and Earlier Code Injection Vulnerability | - | 9.8 (v3.1) | Critical |
| CVE-2026-35906 | An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 OS Command Injection Vulnerability | - | 9.6 (v3.1) | Critical |
| CVE-2026-8986 | Command Injection via Malicious OCPP Server | maxicharger single charger firmware | 9.5 (v4.0) | Critical |
| CVE-2013-10060 | Netgear DGN2200B pppoe.cgi Remote Command Execution | dgn2200b firmware | 9.4 (v4.0) | Critical |
| CVE-2020-36856 | Nagios XI < 5.6.14 Authenticated RCE command_test.php via address | nagios xi | 9.4 (v4.0) | Critical |
| CVE-2026-39932 | OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection | openemr | 9.4 (v4.0) | Critical |
| CVE-2026-58146 | Unauthorized remote code execution in T-Mobile 5G Box IDU routers | T-Mobile 5G Box IDU | 9.4 (v4.0) | Critical |
| CVE-2026-69256 | Flowise: Remote Code Execution Vulnerability in CSVAgent | flowise | 9.4 (v4.0) | Critical |
| CVE-2018-25357 | Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php | dolibarr erp/crm | 9.3 (v4.0) | Critical |
| CVE-2024-9166 | TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution | Atemio AM 520 HD Full HD Satellite Receiver | 9.3 (v4.0) | Critical |
| CVE-2025-10364 | Unauthenticated Arbitrary Command Injection in Evertz SDVN | 3080ipx-10G | 9.3 (v4.0) | Critical |
| CVE-2025-59737 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 9.3 (v4.0) | Critical |
| CVE-2025-59739 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 9.3 (v4.0) | Critical |
| CVE-2025-59740 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 9.3 (v4.0) | Critical |
| CVE-2025-59741 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 9.3 (v4.0) | Critical |
| CVE-2025-71429 | GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py | GPT-SoVITS | 9.3 (v4.0) | Critical |
| CVE-2026-101001 | Netcore NBR200V2 Web Management network_tools eval os command injection | NBR200V2 | 9.3 (v4.0) | Critical |
| CVE-2026-102240 | Netcore NAP930 Network Tools CGI network_tools eval os command injection | NAP930 | 9.3 (v4.0) | Critical |
| CVE-2026-105110 | Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter | Innbox | 9.3 (v4.0) | Critical |
| CVE-2026-107780 | Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter | skyeye | 9.3 (v4.0) | Critical |
| CVE-2026-108598 | Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates | floci | 9.3 (v4.0) | Critical |
| CVE-2026-108804 | TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection | TEW-751DR | 9.3 (v4.0) | Critical |
| CVE-2026-113802 | Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler | WL-WN530BE1-A | 9.3 (v4.0) | Critical |
| CVE-2026-34106 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-34108 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-34109 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-34110 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-34111 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-34112 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-34115 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.php | language-system | 9.3 (v4.0) | Critical |
| CVE-2026-35047 | Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint | bravecms | 9.3 (v4.0) | Critical |
| CVE-2026-41939 | Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly | Care Everywhere Gateway | 9.3 (v4.0) | Critical |
| CVE-2026-44402 | Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi | SNMP Web Pro | 9.3 (v4.0) | Critical |
| CVE-2026-53975 | OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec | OpenChamber | 9.3 (v4.0) | Critical |
| CVE-2026-58457 | Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp | M300 Wi-Fi Repeater | 9.3 (v4.0) | Critical |
| CVE-2026-61498 | Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php | flamingo | 9.3 (v4.0) | Critical |
| CVE-2026-61511 | vBulletin 6.x - Remote Code Execution | vBulletin | 9.3 (v4.0) | Critical |
| CVE-2026-63766 | GPT-SoVITS 20250606v2pro OS Command Injection via webui.py | GPT-SoVITS | 9.3 (v4.0) | Critical |
| CVE-2026-71921 | DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi | VigorSwitch G2540xs | 9.3 (v4.0) | Critical |
| CVE-2026-71946 | D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun | DWR-M961 | 9.3 (v4.0) | Critical |
| CVE-2026-71947 | D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun | DWR-M961 | 9.3 (v4.0) | Critical |
| CVE-2026-71948 | D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun | DWR-M961 | 9.3 (v4.0) | Critical |
| CVE-2026-71955 | D-Link DWR-M961 Command Injection via /boafrm/formWsc | DWR-M961 | 9.3 (v4.0) | Critical |
| CVE-2026-71984 | MSI Radix AXE6600 v781521 Command Injection via urlfilter | Radix AXE6600 | 9.3 (v4.0) | Critical |
| CVE-2026-71992 | MSI Radix AXE6600 v781521 Command Injection via macfilter | Radix AXE6600 | 9.3 (v4.0) | Critical |
| CVE-2026-72710 | SPIP < 4.4.18 Remote Code Execution via editer_objet.php Job Queue Injection | SPIP | 9.3 (v4.0) | Critical |
| CVE-2026-85520 | Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module | Google Merchant Center Feed | 9.3 (v4.0) | Critical |
| CVE-2026-89308 | Arbitrary command execution in TrxTimeATTENDANCE | TrxTimeATTENDANCE | 9.3 (v4.0) | Critical |
| CVE-2026-96754 | orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path | orval | 9.3 (v4.0) | Critical |
| CVE-2026-10042 | manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model | manga-image-translator | 9.2 (v4.0) | Critical |
| CVE-2026-87930 | MaxSite CMS through 109.6 PHP Object Injection via ci_session | MaxSite CMS | 9.2 (v4.0) | Critical |
| CVE-2021-26855 | Microsoft Exchange ProxyLogon RCE | exchange server | 9.1 (v3.1) | Critical |
| CVE-2024-51092 | LibreNMS Authenticated RCE (CVE-2024-51092) | librenms | 9.1 (v3.1) | Critical |
| CVE-2025-65473 | easyimages2.0 Arbitrary Code Execution Vulnerability | easyimages2.0 | 9.1 (v3.1) | Critical |
| CVE-2026-12486 | GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability | GV-I/O Box 4E | 9.1 (v3.1) | Critical |
| CVE-2026-12849 | GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability | GV-I/O Box 4E | 9.1 (v3.1) | Critical |
| CVE-2026-12850 | GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability | GV-I/O Box 4E | 9.1 (v3.1) | Critical |
| CVE-2026-12851 | GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability | GV-I/O Box 4E | 9.1 (v3.1) | Critical |
| CVE-2026-39353 | InvoicePlane: Remote Code Execution via Writable Templates Directory | InvoicePlane | 9.1 (v3.1) | Critical |
| CVE-2026-46621 | Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection | yamcs | 9.1 (v3.1) | Critical |
| CVE-2026-47168 | EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params | espocrm | 9.1 (v3.1) | Critical |
| CVE-2026-55511 | Yamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs executeSql | yamcs | 9.1 (v3.1) | Critical |
| CVE-2026-58400 | GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter | core-geonetwork | 9.1 (v3.1) | Critical |
| CVE-2026-79766 | Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email | Termix | 9.1 (v3.1) | Critical |
| CVE-2009-1978 | Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability | secure backup | 9.0 (v2.0) | High |
| CVE-2026-102608 | ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) | zoneminder | 9.0 (v3.1) | Critical |
| CVE-2026-14602 | Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter | Remote API | 9.0 (v3.1) | Critical |
| CVE-2026-34612 | Kestra: Remote Code Execution via SQL Injection | kestra | 9.0 (v3.1) | Critical |
| CVE-2026-45750 | Termix Vulnerable to Arbitrary Command Execution in File Manager | termix | 9.0 (v3.1) | Critical |
| CVE-2026-62674 | Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE | omnigent | 9.0 (v3.1) | Critical |
| CVE-2026-69251 | Flowise RCE via TypeORM DataSource | flowise | 9.0 (v4.0) | Critical |
| CVE-2026-41304 | WWBN AVideo vulnerable to RCE caused by clonesite plugin | avideo | 8.9 (v4.0) | High |
| CVE-2026-43945 | FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection | FUXA | 8.9 (v4.0) | High |
| CVE-2026-73570 | zimbra collaboration suite Arbitrary Code Execution Vulnerability | zimbra collaboration suite | 8.9 (v3.1) | High |
| CVE-2017-6884 | Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection | emg2926 firmware | 8.8 (v3.1) | High |
| CVE-2020-15874 | Command Injection | - | 8.8 (v3.1) | High |
| CVE-2021-22053 | Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution | spring cloud netflix | 8.8 (v3.1) | High |
| CVE-2021-32819 | Nodejs Squirrelly - Remote Code Execution | squirrelly | 8.8 (v3.1) | High |
| CVE-2021-3577 | Motorola Baby Monitors - Remote Command Execution | halo+ camera firmware | 8.8 (v3.1) | High |
| CVE-2023-2288 | Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization | otter | 8.8 (v3.1) | High |
| CVE-2025-10706 | Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation | ClassifiedPro - reCommerce WordPress Theme | 8.8 (v3.1) | High |
| CVE-2025-51457 | D-Link DAP-2610 up to 2.06B08r099 Command Injection Vulnerability | D-Link DAP-2610 up to 2.06B08r099 | 8.8 (v3.1) | High |
| CVE-2025-65471 | easyimages2.0 Arbitrary Code Execution Vulnerability | easyimages2.0 | 8.8 (v3.1) | High |
| CVE-2026-110908 | pfSense-pkg-frr Command Injection Vulnerability | pfSense-pkg-frr | 8.8 (v3.1) | High |
| CVE-2026-34197 | Apache ActiveMQ Jolokia Remote Code Execution (CVE-2026-34197) | activemq | 8.8 (v3.1) | High |
| CVE-2026-35196 | Chamilo LMS has OS Command Injection via export_all_certificates action | chamilo lms | 8.8 (v3.1) | High |
| CVE-2026-52483 | OS Command Injection | - | 8.8 (v3.1) | High |
| CVE-2026-52484 | MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 Arbitrary Code Execution Vulnerability | - | 8.8 (v3.1) | High |
| CVE-2026-54149 | MaxKB MCP tool import validation bypass allows post-authentication remote code execution | MaxKB | 8.8 (v3.1) | High |
| CVE-2026-57296 | Jenkins External Workspace Manager Plugin Arbitrary Code Execution Vulnerability | Jenkins External Workspace Manager Plugin | 8.8 (v3.1) | High |
| CVE-2026-59734 | Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution | coolify | 8.8 (v3.1) | High |
| CVE-2026-65660 | Microsoft SharePoint Server Remote Code Execution Vulnerability | sharepoint server | 8.8 (v3.1) | High |
| CVE-2026-72875 | Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile | dokploy | 8.8 (v3.1) | High |
| CVE-2026-77601 | OpenC3 COSMOS: Authenticated OS command injection via the pypi_url setting | cosmos | 8.8 (v3.1) | High |
| CVE-2026-82804 | Apache DolphinScheduler: Command Injection in the Alert Script Plugin | Apache DolphinScheduler | 8.8 (v3.1) | High |
| CVE-2026-84317 | Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the o | nginx-ui | 8.8 (v3.1) | High |
| CVE-2026-84318 | Nginx UI: MCP nginx_config_add Bypasses Directive Validation — Authenticated RCE | nginx-ui | 8.8 (v3.1) | High |
| CVE-2026-85731 | oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir) | oras-go | 8.8 (v3.1) | High |
| CVE-2005-10004 | Cacti graph_view.php Remote Command Execution | cacti | 8.7 (v4.0) | High |
| CVE-2015-10145 | Gargoyle 1.5.x Authenticated OS Command Execution via run_commands.sh | gargoyle | 8.7 (v4.0) | High |
| CVE-2021-47943 | TextPattern CMS 4.8.7 Remote Code Execution via File Upload | TextPattern CMS | 8.7 (v4.0) | High |
| CVE-2022-50944 | Aero CMS 0.0.1 PHP Code Injection via posts.php | Aero CMS | 8.7 (v4.0) | High |
| CVE-2024-58294 | FreePBX 16 Authenticated Remote Code Execution via API Module | freepbx | 8.7 (v4.0) | High |
| CVE-2025-34115 | OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php | OP5 Monitor | 8.7 (v4.0) | High |
| CVE-2025-34311 | IPFire < v2.29 Command Injection via Proxy Report Creation | ipfire | 8.7 (v4.0) | High |
| CVE-2025-34334 | AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPE | fax server | 8.7 (v4.0) | High |
| CVE-2025-71260 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE | footprints | 8.7 (v4.0) | High |
| CVE-2026-105123 | W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API | wcms | 8.7 (v4.0) | High |
| CVE-2026-109308 | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection | cms | 8.7 (v4.0) | High |
| CVE-2026-112351 | Sunhillo SureLine OS Command Injection via networkDiag.cgi | SureLine | 8.7 (v4.0) | High |
| CVE-2026-116009 | Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action | camaleon-cms | 8.7 (v4.0) | High |
| CVE-2026-34228 | Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write | emlog | 8.7 (v4.0) | High |
| CVE-2026-34735 | Hytale Modding Vulnerable to Remote Code Execution via File Upload Bypass in FileController | wiki | 8.7 (v4.0) | High |
| CVE-2026-34791 | Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-34792 | Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-34793 | Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-34794 | Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-34795 | Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-34796 | Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-34797 | Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injection | firewall community | 8.7 (v4.0) | High |
| CVE-2026-41934 | Vvveb < 1.0.8.2 Authenticated RCE via Code Editor | Vvveb | 8.7 (v4.0) | High |
| CVE-2026-55094 | Taskcluster: Unauthenticated remote code execution in web-server via GraphQL filter argument (sift $where) | taskcluster | 8.7 (v4.0) | High |
| CVE-2026-64837 | ICEcoder through 8.1 OS Command Injection via lib/properties.php | ICEcoder | 8.7 (v4.0) | High |
| CVE-2026-67206 | Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload | wolfcms | 8.7 (v4.0) | High |
| CVE-2026-71981 | Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter | cypht | 8.7 (v4.0) | High |
| CVE-2026-7551 | HKUDS OpenHarness Remote Command Execution via /bridge Slash Command | openharness | 8.7 (v4.0) | High |
| CVE-2026-76060 | OS Command Injection in PayRange API | Zoneminder | 8.7 (v4.0) | High |
| CVE-2026-76836 | AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass | AzuraCast | 8.7 (v4.0) | High |
| CVE-2026-79756 | Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform | nuclio | 8.7 (v4.0) | High |
| CVE-2026-85610 | OpenPanel before 2.3.0 Remote Code Execution via chart formulas | openpanel | 8.7 (v4.0) | High |
| CVE-2024-20353 | adaptive security appliance software Denial of Service Vulnerability | adaptive security appliance software | 8.6 (v3.1) | High |
| CVE-2025-68455 | Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior | craft cms | 8.6 (v4.0) | High |
| CVE-2026-109108 | Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection | WL-WN530BE1-A | 8.6 (v4.0) | High |
| CVE-2026-113390 | DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection | Vigor2960 | 8.6 (v4.0) | High |
| CVE-2026-113506 | aaPanel File Manager common.py ExecShell os command injection | aaPanel | 8.6 (v4.0) | High |
| CVE-2026-23698 | Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload | Vtiger CRM | 8.6 (v4.0) | High |
| CVE-2026-40187 | Authenticated RCE via Malicious eTemplate Upload in EGroupware | egroupware | 8.6 (v4.0) | High |
| CVE-2026-42785 | OpenKM 6.3.12 Remote Code Execution via Administrative Scripting | OpenKM Community Edition | 8.6 (v4.0) | High |
| CVE-2026-53804 | OTRS Community Edition OS Command Injection via PGP Configuration | OTRS Community Edition | 8.6 (v4.0) | High |
| CVE-2026-54710 | FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) | freepbx | 8.6 (v4.0) | High |
| CVE-2026-56703 | Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO | adminer | 8.6 (v4.0) | High |
| CVE-2026-67599 | ClearOS 7.9 OS Command Injection via Log Viewer filter parameter | ClearOS | 8.6 (v4.0) | High |
| CVE-2026-67608 | Telenia TVox 26.5.3 OS Command Injection via action_audio.php | TVox | 8.6 (v4.0) | High |
| CVE-2026-71908 | DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test | VigorAP 918R | 8.6 (v4.0) | High |
| CVE-2026-71913 | DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgi | VigorAP 918R | 8.6 (v4.0) | High |
| CVE-2026-71918 | DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction | VigorSwitch G2540xs | 8.6 (v4.0) | High |
| CVE-2026-71919 | DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot | VigorSwitch G2540xs | 8.6 (v4.0) | High |
| CVE-2026-71931 | DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade | VigorSwitch G2540xs | 8.6 (v4.0) | High |
| CVE-2026-75123 | PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_smtp_test_post | PLANET GS-4210-16P2S V3 | 8.6 (v4.0) | High |
| CVE-2026-80214 | LibreNMS Virtualisation Discovery Module RCE | librenms | 8.6 (v4.0) | High |
| CVE-2026-82692 | D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection | DNS-340L | 8.6 (v4.0) | High |
| CVE-2026-86733 | Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore | snipe-it | 8.6 (v4.0) | High |
| CVE-2025-34332 | AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE | fax server | 8.5 (v4.0) | High |
| CVE-2025-34333 | AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE | fax server | 8.5 (v4.0) | High |
| CVE-2026-22244 | OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE | openmetadata | 8.5 (v4.0) | High |
| CVE-2026-82690 | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection | DNS-327L | 8.5 (v4.0) | High |
| CVE-2026-85222 | D-Link DNS-340L Add-On Center addon_center.cgi os command injection | DNS-340L | 8.5 (v4.0) | High |
| CVE-2026-85224 | D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection | DNS-320 ShareCenter | 8.5 (v4.0) | High |
| CVE-2026-92397 | Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection | RG-EW3000GX | 8.5 (v4.0) | High |
| CVE-2018-11776 | Apache Struts2 S2-057 - Remote Code Execution | struts | 8.1 (v3.1) | High |
| CVE-2026-55173 | AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving | AVideo | 8.1 (v3.1) | High |
| CVE-2026-97875 | DNS rebinding vulnerability in rojo serve HTTP API | rojo | 8.1 (v3.1) | High |
| CVE-2014-100005 | D-Link DIR-645 / DIR-815 diagnostic.php Command Execution | dir-600 firmware | 8.0 (v3.1) | High |
| CVE-2021-27065 | Microsoft Exchange ProxyLogon RCE | exchange server | 7.8 (v3.1) | High |
| CVE-2026-105764 | Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE | immich | 7.7 (v4.0) | High |
| CVE-2026-108161 | FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download | fusionpbx | 7.7 (v4.0) | High |
| CVE-2026-42099 | Race Condition in Sparx Pro Cloud Server | pro cloud server | 7.7 (v4.0) | High |
| CVE-2026-66738 | SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite | SPIP | 7.7 (v4.0) | High |
| CVE-2026-93872 | Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter | Cotonti | 7.7 (v4.0) | High |
| CVE-2001-0333 | MS01-026 Microsoft IIS/PWS CGI Filename Double Decode Command Execution | internet information server | 7.5 (v2.0) | High |
| CVE-2025-63951 | phoniebox Unsafe Deserialization Vulnerability | phoniebox | 7.5 (v3.1) | High |
| CVE-2026-19913 | Kaltura HTML5 Video Player, html5lib library Improper Input Validation Vulnerability | Kaltura HTML5 Video Player, html5lib library | 7.5 (v3.1) | High |
| CVE-2026-34239 | Chamilo Authenticated Remote Code Execution | chamilo-lms | 7.5 (v4.0) | High |
| CVE-2026-36783 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to Denial of Service Vulnerability | - | 7.5 (v3.1) | High |
| CVE-2026-36796 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to Denial of Service Vulnerability | - | 7.5 (v3.1) | High |
| CVE-2026-46581 | mojarra Path Traversal Vulnerability | mojarra | 7.5 (v3.1) | High |
| CVE-2026-53534 | JabRef CAYW Sublime Text integration permits operating-system command injection | jabref | 7.5 (v4.0) | High |
| CVE-2026-53599 | Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mo | core | 7.5 (v3.1) | High |
| CVE-2025-68619 | Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package | signal k server | 7.3 (v4.0) | High |
| CVE-2026-19771 | Baicells EG3661M LuCI Web luci os command injection | EG3661M | 7.3 (v4.0) | High |
| CVE-2021-33544 | Geutebruck - Remote Command Injection | g-cam ebc-2110 | 7.2 (v3.1) | High |
| CVE-2025-48868 | Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive | horilla | 7.2 (v3.1) | High |
| CVE-2025-58762 | Tautulli vulnerable to Authenticated Remote Code Execution via write primitive and Script notification agent | tautulli | 7.2 (v3.1) | High |
| CVE-2025-58763 | Tautulli vulnerable to Authenticated Remote Code Execution via Command Injection | tautulli | 7.2 (v3.1) | High |
| CVE-2026-27891 | Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism | facturascripts | 7.2 (v3.1) | High |
| CVE-2026-29782 | OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2 | openstamanager | 7.2 (v3.1) | High |
| CVE-2026-6020 | ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 7.2 (v3.1) | High |
| CVE-2026-81669 | IBM Guardium Data Protection is affected by multiple vulnerabilities. | guardium data protection | 7.2 (v3.1) | High |
| CVE-2026-96896 | Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request | Malcure Malware Shield — Removal, Repair, Monitor | 7.2 (v3.1) | High |
| CVE-2026-9777 | ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability | unizon | 7.2 (v3.0) | High |
| CVE-2025-71257 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass | footprints itsm | 6.9 (v4.0) | Medium |
| CVE-2026-116253 | DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection | DedeCMS | 6.9 (v4.0) | Medium |
| CVE-2026-19983 | GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection | A1300 | 6.9 (v4.0) | Medium |
| CVE-2026-97865 | Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization | Open-Web-Analytics | 6.9 (v4.0) | Medium |
| CVE-2022-28810 | ManageEngine ADSelfService Plus Custom Script Execution | manageengine adselfservice plus | 6.8 (v3.1) | Medium |
| CVE-2026-79761 | Termix: Command injection in SSH key deployment verification | Termix | 6.6 (v3.1) | Medium |
| CVE-2025-11372 | LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 6.5 (v3.1) | Medium |
| CVE-2025-14545 | YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation | YML for Yandex Market | 6.5 (v3.1) | Medium |
| CVE-2025-7825 | Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation | Schema Plugin For Divi, Gutenberg & Shortcodes | 6.3 (v3.1) | Medium |
| CVE-2026-45626 | Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameter | arcane | 6.3 (v3.1) | Medium |
| CVE-2025-13439 | Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserializatio | Fancy Product Designer | 5.9 (v3.1) | Medium |
| CVE-2025-13262 | lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal | lsfusion platform | 5.5 (v4.0) | Medium |
| CVE-2025-13786 | taosir WTCMS index.php fetch code injection | wtcms | 5.5 (v4.0) | Medium |
| CVE-2025-13792 | Qualitor getResumo.php eval code injection | the file /html/st/stdeslocamento/request/getResumo.php | 5.5 (v4.0) | Medium |
| CVE-2026-19379 | EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection | ipTIME AX8004M | 5.5 (v4.0) | Medium |
| CVE-2026-5333 | DefaultFuction Content-Management-System tools.php command injection | content management system | 5.5 (v4.0) | Medium |
| CVE-2026-54611 | InstantCMS has Remote Code Execution in package installer | icms2 | 5.5 (v3.1) | Medium |
| CVE-2026-7698 | Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection | Easy7 Integrated Management Platform | 5.5 (v4.0) | Medium |
| CVE-2026-82598 | SeaCMS Template search.php parseIf code injection | SeaCMS | 5.5 (v4.0) | Medium |
| CVE-2026-9474 | yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection | StudentManagementSystem | 5.5 (v4.0) | Medium |
| CVE-2023-7299 | DataGear resolveSql sql injection | datagear | 5.3 (v4.0) | Medium |
| CVE-2025-11344 | ILIAS Certificate Import code injection | ilias | 5.3 (v4.0) | Medium |
| CVE-2026-19785 | francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection | RosarioSIS | 5.3 (v4.0) | Medium |
| CVE-2026-29202 | cPanel Code Injection Vulnerability | cPanel | 5.3 (v4.0) | Medium |
| CVE-2025-59751 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2025-59752 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2025-59753 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2025-59754 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2025-59759 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2025-59773 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2025-59774 | Multiple vulnerabilities in AndSoft's e-TMS | e-tms | 5.1 (v4.0) | Medium |
| CVE-2010-0904 | Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability | secure backup | 5.0 (v2.0) | Medium |
| CVE-2025-14276 | Ilevia EVE X1 Server leaf_search.php command injection | EVE X1 Server | 2.9 (v4.0) | Low |
| CVE-2026-90575 | PHPGurukul Small CRM Login Success login.php unserialize deserialization | Small CRM | 2.9 (v4.0) | Low |
| CVE-2025-11490 | wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection | desktopcommandermcp | 2.1 (v4.0) | Low |
| CVE-2025-11902 | yanyutao0402 ChanCMS findField sql injection | chancms | 2.1 (v4.0) | Low |
| CVE-2025-11905 | yanyutao0402 ChanCMS gather.js getArticle code injection | chancms | 2.1 (v4.0) | Low |
| CVE-2025-12266 | Zytec Dalian Zhuoyun Technology Central Authentication Service widget _empty code injection | Central Authentication Service | 2.1 (v4.0) | Low |
| CVE-2025-14204 | TykoDev cherry-studio-TykoFork OAuth Server Discovery oauth-authorization-server redirectToAuthorization os command inje | cherry-studio-TykoFork | 2.1 (v4.0) | Low |
| CVE-2026-103540 | formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine | Form Tools | 2.1 (v4.0) | Low |
| CVE-2026-11408 | vertex-app vertex Log Viewer Endpoint LogMod.js os command injection | vertex | 2.1 (v4.0) | Low |
| CVE-2026-12814 | Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection | CF-WR631AX V3 | 2.1 (v4.0) | Low |
| CVE-2026-14691 | SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code inject | Multi-Vendor Online Grocery Management System | 2.1 (v4.0) | Low |
| CVE-2026-14698 | SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload | Syllabus-Aligned Learning Management and Examination System | 2.1 (v4.0) | Low |
| CVE-2026-15512 | pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection | Pig | 2.1 (v4.0) | Low |
| CVE-2026-7508 | Bootstrap CMS Page Creation show.blade.php code injection | CMS | 2.1 (v4.0) | Low |
| CVE-2026-7683 | Edimax BR-6428nC Web setWAN command injection | BR-6428nC | 2.1 (v4.0) | Low |
| CVE-2026-8191 | Wavlink NU516U1 adm.cgi wifi_region os command injection | wl-nu516u1 firmware | 2.1 (v4.0) | Low |
| CVE-2026-90581 | cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection | nginxWebUI | 2.1 (v4.0) | Low |
| CVE-2026-91853 | TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection | X5000R | 2.1 (v4.0) | Low |
| CVE-2025-11141 | Ruijie NBR2100G-E branch_passw.php listAction os command injection | NBR2100G-E | 2.0 (v4.0) | Low |
| CVE-2026-82678 | diem-project diem Administrative Console actions.class.php executeCommand os command injection | diem | 2.0 (v4.0) | Low |
| CVE-2026-90788 | magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection | MacCMS10 | 2.0 (v4.0) | Low |
| CVE-2026-94103 | RooCMS Frontend Rendering site_pagePHP.php eval code injection | RooCMS | 2.0 (v4.0) | Low |
| CVE-2026-113388 | opensource-socialnetwork Cache Settings dynamic.php input code injection | opensource-socialnetwork | 1.9 (v4.0) | Low |
| CVE-2026-108827 | Zen Cart Administrative Module Management general.php zen_call_function code injection | Zen Cart | 1.2 (v4.0) | Low |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.