Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
> Search
10 results for “command-injection”
Cyber Crime
SecurityCritical Command Injection Hits MSI Radix
A critical vulnerability in the MSI Radix AXE6600 router allows remote attackers to gain root access via the wps.cgi interface.
SecurityCritical Command Injection Hits Puwell Cameras
Puwell IP cameras running firmware versions 2.x through 4.x are vulnerable to unauthenticated remote code execution via a flaw in the DebugShell interface.
SecurityCritical Command Injection Flaw in GL-iNet
A severe RCE vulnerability in GL-MT3000 routers allows unauthenticated remote attackers to execute arbitrary system commands.
SecurityCritical Command Execution Flaw in IBM HMC
A critical vulnerability in IBM HMC systems allows unauthenticated attackers to execute arbitrary commands with elevated privileges.
SecurityCritical Command Injection Flaw in CVE-2026-7849
A critical vulnerability allows unauthenticated attackers to execute arbitrary commands as root, earning a maximum CVSS score of 9.8.
SecurityCritical Command Injection Hits IBM Aspera
A critical shell command injection flaw in IBM Aspera Faspex 5 allows remote authenticated attackers to execute arbitrary code with high-level privileges.
SecurityAVideo Command Injection Flaw Exposed
A critical vulnerability in AVideo allows for arbitrary OS command execution, bypassing previous security mitigations.
SecurityCISA Adds FortiSandbox Flaw to KEV List
Federal agencies must address a critical OS command injection vulnerability in Fortinet products by July 19, 2026.
SecurityCISA Warns of Active FortiSandbox Flaw
Federal agencies must address an actively exploited OS command injection vulnerability in Fortinet products by July 19, 2026.