Weaknesses of type CWE-77
2,522 resultsCVE-2020-25847HIGHCommand Injection Vulnerability in QTS and QuTS heroEPSS 2.5%CVE-2025-1536MEDIUMRaisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injectionEPSS 2.5%CVE-2019-12651HIGHCisco IOS XE Software Web UI Command Injection VulnerabilitiesEPSS 2.5%CVE-2026-1689MEDIUMTenda HG10 Login formLogin checkUserFromLanOrWan command injectionEPSS 2.5%CVE-2024-22107HIGHAn issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/ControlEPSS 2.5%CVE-2021-3621—A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommandsEPSS 2.5%CVE-2026-3518HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 2.5%CVE-2014-0773—Advantech WebAccess Command InjectionEPSS 2.5%CVE-2023-49428HIGHTenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.EPSS 2.5%CVE-2026-6027CRITICALTotolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injectionEPSS 2.5%CVE-2025-6103HIGHWifi-soft UniBox Controller test_accesscodelogin.php os command injectionEPSS 2.5%CVE-2024-32025CRITICALKohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)EPSS 2.5%CVE-2023-27078CRITICALA command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafted rEPSS 2.5%CVE-2026-26791CRITICALGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_serEPSS 2.5%CVE-2026-26795CRITICALGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log funEPSS 2.5%CVE-2026-5104MEDIUMTotolink A3300R cstecgi.cgi setStaticRoute command injectionEPSS 2.5%CVE-2025-2095MEDIUMTOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injectionEPSS 2.5%CVE-2026-4466MEDIUMComfast CF-AC100 mbox-config command injectionEPSS 2.5%CVE-2023-31700HIGHTP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.EPSS 2.5%CVE-2023-31701HIGHTP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.EPSS 2.5%