CWE-77 - Command Injection - Cwe

Related Threat Clusters

• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• Critical Vulnerabilities in Tenable Security Center Prompt Urgent Patch Release

  Tenable has released Security Center Patch SC202607.1 to address multiple vulnerabilities in third-party components, including Apache, OpenSSL, PostgreSQL, PHP, and Redis. The patch resolves critical issues such as SQL…

  2 articles · Updated July 21, 2026
• Critical Vulnerabilities in Gogs and Jinjava Require Immediate Patching

  Multiple critical vulnerabilities affecting Gogs and Jinjava have been disclosed, with severe impacts including remote code execution (RCE) and unauthorized file access. Gogs vulnerabilities include CVE-2025-64111…

  2 articles · Updated June 25, 2026
• Critical CVE-2026-16117 Vulnerability in @fastify/http-proxy Exposes Internal Endpoints

  CVE-2026-16117 was published on July 18, 2026, detailing a critical vulnerability in @fastify/http-proxy versions up to 11.5.0. The flaw allows attackers to bypass request prefix rewrites when the prefix is URL-encoded,…

  2 articles · Updated July 19, 2026
• Critical SearchLeak Vulnerability in Microsoft 365 Copilot Exposes Sensitive Data

  A newly disclosed vulnerability in Microsoft 365 Copilot Enterprise, named SearchLeak (CVE-2026-42824), allows attackers to exfiltrate sensitive data with a single click on a crafted link. Discovered by Varonis Threat…

  34 articles · Updated June 15, 2026
• Seiko SkyBridge IoT Routers Face Permanent OS Injection Vulnerability

  Seiko Solutions' SkyBridge MB-A100 and MB-A110 routers are affected by a high-severity OS command injection vulnerability (CVE-2026-50043) disclosed on July 1, 2026. The flaw allows authenticated attackers to execute…

  2 articles · Updated July 4, 2026
• Critical Remote Command Execution Vulnerabilities in SUSE Cockpit

  SUSE has released a security update addressing multiple vulnerabilities in Cockpit, impacting SUSE Linux Enterprise and openSUSE systems. Notably, CVE-2026-4802 allows remote command execution via unsanitized…

  4 articles · Updated May 23, 2026
• Multiple Vulnerabilities Discovered in Substance3D Software

  On March 10, 2026, three critical vulnerabilities were published affecting Substance3D software. CVE-2026-21365 and CVE-2026-27219 both impact Substance3D - Painter versions 11.1.2 and earlier, exposing users to…

  179 articles · Updated March 11, 2026
• AISLE Launches On-Premises AI Vulnerability Scanner for Regulated Enterprises

  AISLE has launched Snapshot, an on-premises AI vulnerability scanner designed for regulated enterprises. This tool allows organizations to maintain control over their source code and security data while scanning for…

  3 articles · Updated June 11, 2026

Recent Intelligence Reports

• CVE-2026-64880 | Tenable® — Tenable · July 21, 2026
• JVN#40604023 prior disclosure — jvn.jp · July 5, 2026
• Warning: Multiple Vulnerabilities in Gogs Allow Remote Code Execution, Patch Immediately! — Ccb.Belgium.Be · June 25, 2026
• A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked. — Thenextweb · June 15, 2026
• Tracker — www.globenewswire.com · June 11, 2026
• Cve 2026 42271 — www.sentinelone.com · June 9, 2026
• 20 — cwe.mitre.org · June 6, 2026
• SUSE Cockpit Security Update Important Remote Command Execution 2019 — Linuxsecurity · May 20, 2026

Related Entities