CWE-78: OS command injection
7,217 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 124 of them as exploited in the wild.
- Published CVEs
- 7,217
- Last 12 months
- 2,349
- Critical
- 2,274
- Known exploited
- 124
Critical 2,274High 3,696Medium 1,206Low 39Not scored 2
CVEs per yearBy the year they were published
- 202520
- 202514
- 202512
- 20253
- 20262,024
- 2026843
- 2026738
- 2026618
- 2026650
- 2026517
- 2026497
- 202657
Known exploitedNewest addition to KEV first
- CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September…
Collabora · Collabora Online - Built-in CODE Server
ExploitedCritical9.2 - CVE-2026-106931
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM…
EG Secure Solutions Inc. · SiteGuard Server Edition for Apache httpd
ExploitedHigh8.5 - CVE-2026-105134
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
Ahsay · AhsayCBS
ExploitedCritical10.0 - CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000…
SonicWall · SMA1000
ExploitedHigh7.8 - CVE-2026-49869
Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
kestra-io · kestra
ExploitedCritical10.0 - CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP…
Zimbra · Collaboration
ExploitedHigh8.9 - CVE-2026-16812
VeloCloud Orchestrator OS Command Injection
Arista Networks · VeloCloud Orchestrator On-Prem
ExploitedCritical10.0 - CVE-2026-25089
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
Fortinet · FortiSandbox
ExploitedCritical9.1 - CVE-2026-39808
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may…
Fortinet · FortiSandbox
ExploitedCritical9.1 - CVE-2025-67038
Lantronix EDS5000, G520, and X300 OS Command Injection
Lantronix · EDS5000 series
ExploitedCritical9.3
Newest CVEs
- CVE-2026-116650
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Tanium · Threat Response
High7.5 - CVE-2026-116651
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Tanium · Threat Response
High7.5 - CVE-2026-118865
Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component
TP-Link Systems Inc. · Archer AX3000 v2
High7.3 - CVE-2026-121621
Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration
Red Hat · Red Hat OpenShift GitOps
High8.8 - CVE-2026-54161
upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution
networkupstools · nut
High8.1 - CVE-2026-121548
nnn through 5.3 OS Command Injection via togglex Plugin
jarun · nnn
High8.4 - CVE-2026-121429
AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()
AzuraCast · AzuraCast
High8.7 - CVE-2026-119742
Nagios XI < 2026R2 OS Command Injection via mibs.php
Nagios Enterprises, LLC · Nagios XI
High8.6 - CVE-2026-77691
Command injection vulnerability
Zohocorp · ManageEngine Key Manager Plus
High8.1 - CVE-2026-105981
Command Injection in Digital I/O
Welotec · TK100
High8.6