CWE-77 - Command Injection

Critical Authentication Bypass in Hitachi Energy RTU500 Firmware

Critical OS Command Injection Vulnerability in OpenSpug Spug

Critical Remote Command Execution Vulnerabilities in SUSE Cockpit

AI-Driven Command Injection Vulnerability Exposes Snowflake Jira Credentials

Critical Vulnerability Disclosed in aaPanel Allowing Remote Command Injection

Multiple Vulnerabilities Discovered in Danfoss AK-SM8xxA Series

Remote Code Execution Vulnerabilities in n8n and LibreNMS Disclosed

Kdenlive and MLT Vulnerability Allows Command Execution via Malicious Files

OpenSpug Spug CVE-2026-108540 - CVSS 9.9 RCE ThreatAft / 6h Attribute Value CVE CVE-2026-108540 CVSS 3.1 9.9 (Critical) CVSS 4.0 9.4 (Critical) CWE CWE-78 OS Command Injection / CWE-77 Command Injection Attack Vector Remote, low privileges required Affected Component /exec/transfer — File Transfer Exploitation Public PoC available Vendor Response None A public proof-of-concept exploit exists and the vendor has not responded to disclosure.

Code Injection Duo — 2 CVEs, Peak CVSS 9.8 in openapi-typescript-codegen and Floci Velocity ThreatAft — Cybersecurity Intelligence / 11h Impact: CVE-108551 allows JavaScript injection into generated TypeScript clients via unescaped Handlebars interpolation — supply-chain compromise of build pipelines. If your CI/CD pipeline ingests OpenAPI specs from vendors, partners, or public repos, an attacker controlling that spec achieves code execution inside your build environment.

CVE-2026-108540 - Exploits & Severity

CISA Orders Federal Agencies to Patch Five Exploited Flaws by October 11 Amid Flax ...

Ubuntu 26.04 Kdenlive Important Command Execution Risk USN-8856

Ba0b8aa9f7516ea0e57b173146ce5408

Exploit for CVE-2026

CVE Alert: CVE-2026-100844 – Project-MONAI

vulncheck.com: VulnCheck Advisory: LibreNMS before 26.5.0 Remote Code Execution via AboutController external site

CC-4837

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Unclassified News Aug 2, 2026 The eval() That Nobody Was Supposed to Find: SQL Import Chains to OS Command Execution in OpenEMR 8.0.0.3 - Jiva Security jivasecurity.com Open source

CVE-2026-64880 | Tenable®

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Tracker

Cve 2026 42271

SUSE Cockpit Security Update Important Remote Command Execution 2019