Vulnerability Spotlight: Tenda AC9 /goform/WanParameterSetting command injection vulnerabilityCisco Talos·Nov 21, 15:32 UTC · Nov 21, 2019Vulnerability in the wildCVE-2019-5071CVE-2019-507260
Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, CrossPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954CVE-2022-22963CVE-2022-22965+20 CVEs60
Vulnerability Spotlight: Multiple Vulnerabilities in Moxa EDRCisco Talos·Apr 13, 15:57 UTC · Apr 13, 2018VulnerabilityCVE-2017-12120CVE-2017-12121CVE-2017-12123+8 CVEs60
Zyxel Patches Critical OS Command Injection Flaw in Access Points and RoutersThe Hacker News·Sep 4, 23:02 UTC · Sep 4, 2024VulnerabilityCVE-2024-7261CVE-2024-5412CVE-2024-6343+7 CVEs60
Fortinet fixed command injection bugs in FortiADC and FortiTesterSecurity Affairs·Jan 4, 15:17 UTC · Jan 4, 2023Vulnerability in the wildCVE-2022-39947CVE-2022-3584560
New Mirai Variant Targets WebSVN Command Injection Vulnerability (CVE-2021Palo Alto Unit 42·Jun 6, 12:14 UTC · Jun 6, 2024VulnerabilityCVE-2021-3230560
Red Hat Linux DHCP Client affected by a command injection flaw, patch it now!Security Affairs·May 16, 09:00 UTC · May 16, 2018VulnerabilityCVE-2018-111160
Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWKCisco Talos·Feb 24, 15:04 UTC · Feb 24, 2020Vulnerability in the wildCVE-2019-5136CVE-2019-5137CVE-2019-5138+9 CVEs60
Vulnerability Spotlight: Moxa AWK-3131A Multiple Features Login Username Parameter OS Command Injection VulnerabilityCisco Talos·Apr 3, 13:21 UTC · Apr 3, 2018VulnerabilityCVE-2017-1445960
Vulnerability Spotlight: MySQL Multi-Master Manager Remote Command Injection VulnerabilityCisco Talos·May 7, 13:36 UTC · May 7, 2018Vulnerability in the wildCVE-2017-14474CVE-2017-1448160
Vulnerability Spotlight: Command injection bug in Exhibitor UICisco Talos·Nov 13, 15:03 UTC · Nov 13, 2019Vulnerability in the wildCVE-2019-502960
Zyxel fixed critical OS command injection flaw in multiple routersSecurity Affairs·Sep 4, 06:27 UTC · Sep 4, 2024VulnerabilityCVE-2024-7261CVE-2017-18368160
Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege EscalationSecurity Affairs·Jul 8, 20:21 UTC · Jul 8, 2026Vulnerability in the wildCVE-2026-50746CVE-2026-50747CVE-2026-50748+7 CVEs60
Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection AttackThe Hacker News·Mar 2, 04:17 UTC · Mar 2, 2023Vulnerability in the wildCVE-2023-20078CVE-2023-20079CVE-2023-22747+1 CVEs60
Command injection flaw in PHP Composer allowed supplySecurity Affairs·Apr 29, 21:28 UTC · Apr 29, 2021VulnerabilityCVE-2021-29472160
Vulnerability Spotlight: OS command injection, directory traversal and other vulnerabilities found in Siretta QuartzCisco Talos·Jan 26, 21:26 UTC · Jan 26, 2023Vulnerability in the wildCVE-2022-40969CVE-2022-40220CVE-2022-38066+15 CVEs60
CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108)Help Net Security·Jun 8, 10:29 UTC · Jun 8, 2026Vulnerability in the wildCVE-2026-2510860
Vulnerability Spotlight: Vulnerabilities in WWBN AVideo web app could lead to command injection, authentication bypassCisco Talos·Aug 16, 15:54 UTC · Aug 16, 2022Vulnerability in the wildCVE-2022-32777CVE-2022-32778CVE-2022-32761+14 CVEs60
Zimbra Patches Critical SNMP Command Injection and Four XSS VulnerabilitiesThe Hacker News·Jul 21, 13:18 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-5005560
Zyxel Releases Patch for Critical Firewall OS Command Injection VulnerabilityThe Hacker News·May 15, 00:00 UTC · May 15, 2022Vulnerability in the wildCVE-2022-30525CVE-2022-26413CVE-2022-26414+1 CVEs60
Zyxel fixes critical command injection flaw in EOL NAS devices (CVE-2024-6342)Help Net Security·Sep 10, 00:00 UTC · Sep 10, 2024Vulnerability in the wildCVE-2024-6342CVE-2024-2997360
Vulnerability Spotlight: Command injection vulnerabilities in Robustel cellular routerCisco Talos·Jun 30, 17:40 UTC · Jun 30, 2022Vulnerability in the wildCVE-2022-32585CVE-2022-33312CVE-2022-33314+3 CVEs60
Vulnerability Spotlight: Vulnerabilities in IBM AIX could lead to command injection with elevated privilegesCisco Talos·Apr 24, 14:59 UTC · Apr 24, 2023Vulnerability in the wildCVE-2023-26286CVE-2023-2852860
Cisco fixes root privilege, command injection vulnerabilities in Cisco SD-WAN solutionHelp Net Security·May 28, 10:03 UTC · May 28, 2020Vulnerability in the wildCVE-2020-3265CVE-2020-3266CVE-2020-3264+2 CVEs60
Cisco fixed a critical command injection bug in IP Phone SeriesSecurity Affairs·Mar 2, 15:55 UTC · Mar 2, 2023Vulnerability in the wildCVE-2023-20078CVE-2023-2007960
QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)Help Net Security·Feb 14, 00:00 UTC · Feb 14, 2024VulnerabilityCVE-2023-47218CVE-2023-50358CVE-2023-4756560
QNAP fixed two critical flaws in QTS OS and appsSecurity Affairs·Nov 6, 14:27 UTC · Nov 6, 2023VulnerabilityCVE-2023-23368CVE-2023-2336960
Hackers target critical flaw CVE-2024-10914 in EOL DSecurity Affairs·Nov 14, 23:47 UTC · Nov 14, 2024VulnerabilityCVE-2024-1091460
Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply ChainThe Hacker News·Apr 22, 05:41 UTC · Apr 22, 2026VulnerabilityCVE-2025-65720CVE-2026-30623CVE-2026-30624+12 CVEs60
Kernel command line injection flaw found in Motorola handsets G4, G5Security Affairs·Jun 11, 12:08 UTC · Jun 11, 2017VulnerabilityCVE-2016-1027760
JPCERT/CC Reports Widespread Exploitation of Array Networks AG Gateway VulnerabilitySecurity Affairs·Dec 5, 13:19 UTC · Dec 5, 2025Vulnerability in the wildCVE-2023-2846160
Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024The Hacker News·Feb 5, 04:14 UTC · Feb 5, 2025Vulnerability in the wildCVE-2024-40891CVE-2024-40890CVE-2024-57726+3 CVEs60
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation AttemptsThe Hacker News·Jul 1, 13:58 UTC · Jul 1, 2026Vulnerability in the wildCVE-2026-8037CVE-2024-121260
TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code ExecutionThe Hacker News·Oct 23, 14:30 UTC · Oct 23, 2025Vulnerability in the wildCVE-2025-6541CVE-2025-6542CVE-2025-7850+2 CVEs60
VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887)Help Net Security·Jun 21, 09:47 UTC · Jun 21, 2023Vulnerability in the wildCVE-2023-20887CVE-2023-20888CVE-2023-20889+1 CVEs60
Serious flaws in Western Digital My Cloud NAS devices allow attackers to fully control themSecurity Affairs·Mar 8, 07:54 UTC · Mar 8, 2017VulnerabilityCVE-2016-10107CVE-2016-1010860
D-Link router models affected by RCE issue that will not be fixedSecurity Affairs·Oct 7, 14:47 UTC · Oct 7, 2019VulnerabilityCVE-2019-1692060
CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities ListThe Hacker News·Dec 31, 05:34 UTC · Dec 31, 2024Vulnerability in the wildCVE-2024-12356CVE-2024-1268660
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instancesSecurity Affairs·Mar 1, 10:01 UTC · Mar 1, 2026Vulnerability in the wildCVE-2025-6432860
PHP Composer flaws enable remote command execution via Perforce VCSSecurity Affairs·Apr 15, 08:47 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-40261CVE-2026-40176160