Fallos del tipo CWE-77
2525 resultadosCVE-2026-7039HIGHtufantunc ssh-mcp index.ts shell.write command injectionEPSS 0.7%CVE-2020-14342MEDIUMIt was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary coEPSS 0.7%CVE-2026-26136MEDIUMMicrosoft Copilot Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-3959MEDIUM0xKoda WireMCP Tshark CLI index.js server.tool os command injectionEPSS 0.6%CVE-2026-4198MEDIUMhypermodel-labs mcp-server-auto-commit index.ts getGitChanges command injectionEPSS 0.6%CVE-2014-9114HIGHBlkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.EPSS 0.6%CVE-2026-5833MEDIUMawwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injectionEPSS 0.6%CVE-2026-5007MEDIUMkazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injectionEPSS 0.6%CVE-2026-5023MEDIUMDeDeveloper23 codebase-mcp RepoMix codebase.ts saveCodebase os command injectionEPSS 0.6%CVE-2025-4010HIGHArbitrary Command Injection in Netcom NTC-6200 & NWL-222EPSS 0.6%CVE-2025-53787HIGHMicrosoft 365 Copilot BizChat Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-66032HIGHClaude Code Command Validation Bypass Allows Arbitrary Code ExecutionEPSS 0.6%CVE-2025-22476MEDIUMDell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Neutralization of Special Elements used in a Command EPSS 0.6%CVE-2025-41250HIGHHeader injection vulnerabilityEPSS 0.6%CVE-2022-45095MEDIUM
Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having tEPSS 0.6%CVE-2025-56425CRITICALAn issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version EPSS 0.6%CVE-2026-4199MEDIUMbazinga012 mcp_code_executor index.ts installDependencies command injectionEPSS 0.6%CVE-2023-33298—com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege Escalation (to root) via shell metacharacters in usiEPSS 0.6%CVE-2024-0005CRITICALA condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specificEPSS 0.6%CVE-2019-1893HIGHCisco Enterprise NFV Infrastructure Software Command Injection VulnerabilityEPSS 0.6%