VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,835)

page 26 of 342
  • CVE-2026-13206CriAug 10, 2026
    Zyxel Networks
    WAH7601
    risk 0.64cvss 9.8epss 0.01

    Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.

  • CVE-2026-72589CriAug 10, 2026
    Alseambusher
    crontab-ui
    risk 0.64cvss 9.8epss 0.01

    An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the…

  • CVE-2026-72580CriAug 10, 2026
    Duhow
    xiaoai-patch
    risk 0.64cvss 9.8epss 0.01

    An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query…

  • CVE-2026-71993CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and…

  • CVE-2026-71992CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and…

  • CVE-2026-71991CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability…

  • CVE-2026-71990CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through…

  • CVE-2026-71989CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute…

  • CVE-2026-71988CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute…

  • CVE-2026-71987CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute…

  • CVE-2026-71986CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the dmz function to execute…

  • CVE-2026-71985CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol…

  • CVE-2026-71984CriAug 9, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.01

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and…

  • CVE-2026-71983CriAug 8, 2026
    MSI
    RadiX AXE6600
    risk 0.64cvss 9.8epss 0.02

    MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit…

  • CVE-2026-71956CriAug 8, 2026
    Dlink
    DWR-M961
    risk 0.64cvss 9.8epss 0.02

    D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command…

  • CVE-2026-71955CriAug 8, 2026
    Dlink
    DWR-M961
    risk 0.64cvss 9.8epss 0.02

    D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, targetAPSsid, peerPin, and…

  • CVE-2026-71954CriAug 8, 2026
    Dlink
    DWR-M961
    risk 0.64cvss 9.8epss 0.02

    D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid…

  • CVE-2026-71953CriAug 8, 2026
    Dlink
    DWR-M961
    risk 0.64cvss 9.8epss 0.02

    D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in…

  • CVE-2026-71952CriAug 8, 2026
    Dlink
    DWR-M961
    risk 0.64cvss 9.8epss 0.02

    D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands into the oldPIn field, resulting in…

  • CVE-2026-71951CriAug 8, 2026
    Dlink
    DWR-M961
    risk 0.64cvss 9.8epss 0.02

    D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEI_value field, resulting in…