SecurityFortra BoKS Patches Fix Critical Auth Bypass
Fortra fixed eight bugs in BoKS, including a 9.9-severity auth bypass and a 9.1 command injection, but reported no known exploitation.
> Search
18 results for “command injection”
Security
SecurityZimbra Flaw Exploited Before Disclosure
Microsoft says attackers probed and exploited a Zimbra command injection flaw in the window between patch release and public disclosure.
SecurityFlaw in Progress LoadMaster exploited in attacks
CISA warns of active exploitation of critical command injection flaw in Progress Kemp LoadMaster; urges patching.
SecurityCritical Command Injection Hits MSI RadiX Router
A critical command injection vulnerability in the MSI RadiX AXE6600 router allows remote attackers to execute arbitrary code and gain root access.
SecurityCritical Command Injection Hits MSI Radix
A critical vulnerability in the MSI Radix AXE6600 router allows remote attackers to gain root access via the wps.cgi interface.
SecurityCISA Warns of Exploited Progress LoadMaster Flaw
A critical command injection vulnerability in Progress LoadMaster is under active exploitation, prompting urgent CISA remediation requirements.
SecurityCritical Command Injection Hits Puwell Cameras
Puwell IP cameras running firmware versions 2.x through 4.x are vulnerable to unauthenticated remote code execution via a flaw in the DebugShell interface.
SecurityCritical Command Injection Hits GL.iNet MT3000
A critical remote command injection vulnerability in GL.iNet GL-MT3000 routers allows unauthenticated attackers to execute arbitrary code on affected devices.
SecurityCritical Command Injection Flaw in GL-iNet
A severe RCE vulnerability in GL-MT3000 routers allows unauthenticated remote attackers to execute arbitrary system commands.
SecurityCritical Command Injection Flaw in CVE-2026-7849
A critical vulnerability allows unauthenticated attackers to execute arbitrary commands as root, earning a maximum CVSS score of 9.8.
SecurityCritical Command Injection Hits IBM Aspera
A critical shell command injection flaw in IBM Aspera Faspex 5 allows remote authenticated attackers to execute arbitrary code with high-level privileges.
SecurityCISA Adds Arista VeloCloud to KEV List
A critical OS command injection vulnerability in Arista VeloCloud Orchestrator is now confirmed to be exploited in the wild.
SecurityMicrosoft Kiota Command Injection Flaw
A critical vulnerability in Microsoft Kiota allows attackers to execute arbitrary code via malicious OpenAPI descriptions processed by the tool.
SecurityAVideo Command Injection Flaw Exposed
A critical vulnerability in AVideo allows for arbitrary OS command execution, bypassing previous security mitigations.
SecurityCISA Adds FortiSandbox Flaw to KEV List
Federal agencies must address a critical OS command injection vulnerability in Fortinet products by July 19, 2026.
SecurityCISA Warns of Active FortiSandbox Flaw
Federal agencies must address an actively exploited OS command injection vulnerability in Fortinet products by July 19, 2026.
SecurityCISA Adds Actively Exploited Fortinet FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.
SecurityUnpatched Surveillance Networks Face Growing Global Exploitation Risk
Thousands of Hikvision devices remain vulnerable to a critical command injection flaw, drawing attention from global threat actors.