CWE-78 - OS Command Injection - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  27 articles · Updated July 15, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• F5 Issues Critical Patches for NGINX Vulnerabilities Allowing Remote Code Execution

  On June 17, 2026, F5 released emergency patches for two critical vulnerabilities in NGINX, CVE-2026-42530 and CVE-2026-42055. These vulnerabilities affect NGINX Open Source, NGINX Plus, and related products, allowing…

  24 articles · Updated June 18, 2026
• Operation Escaneo Targets Latin American Critical Infrastructure

  Operation Escaneo is a coordinated cyberattack attributed to the MexicanMafia group, targeting critical infrastructure across Latin America, primarily Mexico. The campaign, which spanned from 2025 to 2026, utilized…

  4 articles · Updated June 18, 2026
• Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

  Flowise has disclosed a critical remote code execution vulnerability, tracked as CVE-2026-56274, affecting versions prior to 3.1.2 of its Custom MCP Server feature. The flaw allows attackers to exploit multiple OS…

  2 articles · Updated June 23, 2026
• New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

  Forescout Technologies has identified 22 new vulnerabilities in serial-to-IP converters from Lantronix and Silex, which are widely used in critical sectors like healthcare and utilities. These vulnerabilities,…

  9 articles · Updated April 21, 2026
• Critical CVE-2026-8206 Flaw in Kirki Plugin Exposes 500,000 WordPress Sites to Attacks

  A critical vulnerability (CVE-2026-8206) in the Kirki WordPress plugin allows unauthenticated attackers to hijack user accounts, including admin accounts, on over 500,000 websites. Detected by Defiant's Wordfence…

  36 articles · Updated June 3, 2026
• CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

  On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and…

  3 articles · Updated April 26, 2026
• Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

  Ubiquiti has issued security updates for five critical vulnerabilities in UniFi OS, including three maximum severity flaws (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910) that allow remote attackers to execute…

  51 articles · Updated May 22, 2026
• Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure

  A critical pre-authentication remote code execution (RCE) vulnerability in Marimo, an open-source Python notebook platform, was disclosed on April 8, 2026, and exploited within 9 hours and 41 minutes. The vulnerability,…

  16 articles · Updated April 12, 2026

Recent Intelligence Reports

• Comet Prompt Injection — brave.com · July 17, 2026
• Google Mandiant warns of exposed serverless functions as attack vector — Feeds.Feedburner · July 16, 2026
• Hardening serverless cloud functions against lateral movement and AI risks — Feeds.4Sysops · July 16, 2026
• Ubuntu 16.04 Ruby Critical IMAP Injection Buffer Overflow USN-8556 — Linuxsecurity · July 16, 2026
• USN-8556-1: Ruby vulnerabilities — Ubuntu · July 16, 2026
• Remote Code Execution (RCE) in WordPress WP Ultimate CSV Importer Plugin — Patchstack · July 16, 2026
• Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug — Securityaffairs · July 16, 2026
• SonicWall SMA1000 vulnerabilities in active exploitation — Sophos · July 15, 2026

Related Entities