Base de CVEs

CVE-2026-31170 Crítica · 9.8 CWE-77 09/04/2026

Command Injection em Totolink A3300r Firmware

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.

CVE-2026-5854 Crítica · 9.8 CWE-77 09/04/2026

Injeção de comandos do SO em setWiFiEasyCfg do Totolink A7100RU (CVE-2026-5854)

Uma vulnerabilidade foi detectada no Totolink A7100RU 7.4cu.2313_b20191024. Afeta a função setWiFiEasyCfg do arquivo /cgi-bin/cstecgi.cgi do componente CGI Handler. A manipulação do argumento merge resulta em injeção de comandos do sistema operacional (os command injection). É possível iniciar o ataque remotamente. O exploit está agora público e pode ser utilizado.

CVE-2026-5853 Crítica · 9.8 CWE-77 09/04/2026

Injeção de Comando no Sistema Operacional no Totolink A7100RU via setIpv6LanCfg (CVE-2026-5853)

Uma vulnerabilidade de segurança foi detectada no Totolink A7100RU 7.4cu.2313_b20191024. Afetada por esta vulnerabilidade está a função setIpv6LanCfg do arquivo /cgi-bin/cstecgi.cgi do componente CGI Handler. A manipulação do argumento addrPrefixLen leva a injeção de comando no sistema operacional (os command injection). O ataque pode ser realizado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.

CVE-2026-5852 Crítica · 9.8 CWE-77 09/04/2026

Injeção de Comando no Totolink A7100RU via setIptvCfg (CVE-2026-5852)

Foi identificada uma fragilidade no Totolink A7100RU 7.4cu.2313_b20191024. Afetada está a função setIptvCfg do arquivo /cgi-bin/cstecgi.cgi do componente CGI Handler. A manipulação do argumento igmpVer causa injeção de comando no sistema operacional. O ataque pode ser realizado remotamente. O exploit foi disponibilizado ao público e pode ser usado em ataques.

CVE-2026-5851 Crítica · 9.8 CWE-77 09/04/2026

Injeção de Comando no SO no setUPnPCfg do Totolink A7100RU (CVE-2026-5851)

Foi identificada uma falha de segurança no Totolink A7100RU 7.4cu.2313_b20191024. Ela afeta a função setUPnPCfg do arquivo /cgi-bin/cstecgi.cgi do componente CGI Handler. A manipulação do argumento enable resulta em injeção de comando no sistema operacional. O ataque pode ser executado remotamente. O exploit foi divulgado publicamente e pode ser usado em ataques.

CVE-2026-5850 Crítica · 9.8 CWE-77 09/04/2026

Injeção de comando de SO no Totolink A7100RU em setVpnPassCfg (CVE-2026-5850)

Foi identificada uma vulnerabilidade no Totolink A7100RU 7.4cu.2313_b20191024. Ela afeta a função setVpnPassCfg do arquivo /cgi-bin/cstecgi.cgi do componente CGI Handler. A manipulação do argumento pptpPassThru leva a injeção de comando do sistema operacional. A exploração remota é possível. O exploit está publicamente disponível e pode ser utilizado.

CVE-2026-5844 Alta · 7.2 CWE-77 09/04/2026

D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-5831 Média · 6.3 CWE-77 08/04/2026

Agions taskflow-ai terminal_execute handlers.ts os command injection

A security flaw has been discovered in Agions taskflow-ai up to 2.1.8. This impacts an unknown function of the file src/mcp/server/handlers.ts of the component terminal_execute. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. Upgrading to version 2.1.9 will fix this issue. The patch is named c1550b445b9f24f38c4414e9a545f5f79f23a0fe. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CVE-2026-5802 Alta · 7.3 CWE-77 08/04/2026

idachev mcp-javadc HTTP os command injection

A vulnerability was identified in idachev mcp-javadc up to 1.2.4. Impacted is an unknown function of the component HTTP Interface. Such manipulation of the argument jarFilePath leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-5741 Alta · 7.3 CWE-77 07/04/2026

suvarchal docker-mcp-server HTTP index.ts pull_image os command injection

A weakness has been identified in suvarchal docker-mcp-server up to 0.1.0. The impacted element is the function stop_container/remove_container/pull_image of the file src/index.ts of the component HTTP Interface. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-35580 Crítica · 9.1 CWE-77 07/04/2026

Emissary has GitHub Actions Shell Injection via Workflow Inputs

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to repository poisoning and supply chain compromise affecting all downstream users. This vulnerability is fixed in 8.39.0.

CVE-2025-24818 Alta · 8.0 CWE-77 07/04/2026

An OS Command Injection vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search application.

CVE-2026-5692 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection

A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used.

CVE-2026-5691 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi setFirewallType os command injection

A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setFirewallType of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument firewallType leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-5690 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection

A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setRemoteCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument enable can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used.

CVE-2026-5689 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi setNtpCfg os command injection

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2026-5688 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-5679 Média · 5.5 CWE-77 06/04/2026

Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_B20221024. The impacted element is the function vsetTr069Cfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument stun_pass leads to os command injection. The exploit has been disclosed publicly and may be used.

CVE-2026-5678 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument mode can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-5677 Alta · 7.3 CWE-77 06/04/2026

Totolink A7100RU cstecgi.cgi CsteSystem os command injection

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument resetFlags results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-5663 Crítica · 9.8 CWE-77 06/04/2026

Injeção de comando no SO no storescp do OFFIS DCMTK

Foi identificada uma falha de segurança no OFFIS DCMTK até a versão 3.7.0. Ela afeta as funções executeOnReception/executeOnEndOfStudy do arquivo dcmnet/apps/storescp.cc do componente storescp. A manipulação resulta em injeção de comando no sistema operacional. É possível a exploração remota do ataque. O patch recebeu o nome edbb085e45788dccaf0e64d71534cfca925784b8. Aplicar um patch é a ação recomendada para corrigir o problema.

CVE-2026-31059 Crítica · 9.8 CWE-77 06/04/2026

Command Injection em Utt 520w Firmware

A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.

CVE-2026-5621 Média · 5.3 CWE-77 06/04/2026

ChrisChinchilla Vale-MCP HTTP index.ts os command injection

A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument config_path results in os command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-5619 Média · 5.3 CWE-77 06/04/2026

Braffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection

A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarize_command. Executing a manipulation of the argument command can lead to os command injection. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-5603 Média · 5.3 CWE-77 05/04/2026

elgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection

A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation leads to os command injection. An attack has to be approached locally. The exploit is publicly available and might be used. The name of the patch is aa1ffcc0aea1b212c69787391783af27df15ae9d. A patch should be applied to remediate this issue.