Base de CVEs

CVE-2026-31163 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31162 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31179 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31176 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31175 Crítica · 9.8 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31174 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31172 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31171 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31165 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31164 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31160 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-31159 Média · 6.5 CWE-77 23/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-41304 Crítica · 9.8 CWE-77 21/04/2026

Injeção de comando (RCE) no plugin CloneSite do WWBN AVideo

O WWBN AVideo é uma plataforma de vídeo de código aberto. Nas versões 29.0 e anteriores, o endpoint cloneServer.json.php no plugin CloneSite monta comandos de shell usando entrada controlada pelo usuário (parâmetro url) sem sanitização adequada. A entrada é concatenada diretamente em um comando wget executado via exec(), permitindo injeção de comando. Um atacante pode injetar comandos de shell arbitrários ao escapar do contexto da URL pretendida usando caracteres de metassintaxe do shell (por exemplo, ;). Isso leva à Execução Remota de Código (RCE) no servidor. O commit 473c609fc2defdea8b937b00e86ce88eba1f15bb contém uma correção.

CVE-2026-38835 Crítica · 9.8 CWE-77 21/04/2026

Command Injection em Tenda W30e Firmware

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

CVE-2026-38834 Alta · 7.3 CWE-77 21/04/2026

Command Injection em Tenda W30e Firmware

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

CVE-2026-39866 Alta · 8.8 CWE-77 20/04/2026

Lawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.yml

Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in release_update.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 patches the issue.

CVE-2026-4048 Alta · 7.2 CWE-77 20/04/2026

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process.

CVE-2026-3519 Alta · 7.2 CWE-77 20/04/2026

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command

CVE-2026-3518 Alta · 7.2 CWE-77 20/04/2026

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command

CVE-2026-3517 Alta · 7.2 CWE-77 20/04/2026

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command

CVE-2026-30898 Alta · 8.8 CWE-77 18/04/2026

Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

CVE-2026-35682 Alta · 8.8 CWE-77 17/04/2026

Anviz CX2 Lite Command Injection

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

CVE-2026-21709 Média · 6.7 CWE-77 17/04/2026

Command Injection em Veeam Backup and Replication

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

CVE-2026-41153 Crítica · 9.8 CWE-77 17/04/2026

Injeção de Comando no JetBrains Junie via Arquivo de Projeto Malicioso

No JetBrains Junie anterior a 252.549.29, a execução de comandos era possível por meio de um arquivo de projeto malicioso

CVE-2026-6483 Alta · 7.2 CWE-77 17/04/2026

Wavlink WL-WN530H4 internet.cgi snprintf os command injection

A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026.04.16 is able to resolve this issue. Upgrading the affected component is recommended.