CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability (83/100)
CVE-2020-37282 — CVE-2020-37282 — office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execut… (36/100)
CVE-2026-110635 — CVE-2026-110635 — webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers th… (36/100)
CVE-2026-102828 — simple-git project simple-git: simple-git, an interface for running git commands in any node.js application, enables applications to execute… (35/100)
CVE-2026-65130 — CVE-2026-65130 — NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command… (33/100)
CVE-2026-81476 — CVE-2026-81476 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Spec… (38/100)
CVE-2026-91102 — CVE-2026-91102 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. (32/100)
CVE-2026-79689 — CVE-2026-79689 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00… (38/100)
CVE-2026-49869 — Kestra OSS OS Command Injection Vulnerability (70/100)
CVE-2026-83549 — SonicWall SMA1000 Appliances OS Command Injection Vulnerability (64/100)
CVE-2026-73570 — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (66/100)
CVE-2026-19586 — tp-link er7212pc firmware: A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to o… (35/100)
CVE-2026-17186 — CVE-2026-17186 — IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to… (38/100)
CVE-2026-14522 — CVE-2026-14522 — IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote at… (38/100)
CVE-2026-65590 — CVE-2026-65590 — n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows i… (18/100)
CVE-2026-8985 — CVE-2026-8985 — Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoi… (39/100)
CVE-2026-8986 — CVE-2026-8986 — Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCP… (37/100)
CVE-2026-46420 — shivammathur setup php: setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tool… (38/100)
CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection Vulnerability (90/100)
CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability (86/100)
CVE-2026-62392 — apache kylin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in A… (33/100)
CVE-2026-58459 — gpsd project gpsd: gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof t… (32/100)
CVE-2026-54636 — CVE-2026-54636 — Dokku is a docker-powered PaaS. (38/100)
CVE-2026-8592 — CVE-2026-8592 — OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux… (30/100)
CVE-2026-8660 — CVE-2026-8660 — OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows re… (30/100)