FortiAnalyzer and FortiManager HA plugin command injection scores 7.2
An authenticated attacker can run unauthorized commands by sending a crafted HTTP request to the system-ha plugin.
Stories per day · 30 days
3 RSS
Relatedcommand-injection10fortinet7fortimanager4fortianalyzer3fortimail3privilege-escalation2vim20day1cargo1command-execution1cve-2026-1100051editor1fgfmd1fortirecorder1komodo1maian-guardian1oss-security1periphery1
17 stories, newest first · one card per story
Stories tagged #cwe-78
FortiMail OS command injection lets an admin run code as root
The attacker must already be an administrator with system-time read-write access; CVSSv3 is 7.2.
[vim-security] Ex Command Execution via Cargo Quickfix Hooks in Vim < 9.2.1201
Vim before 9.2.1201 can run Ex commands through Cargo quickfix hooks, a medium command-injection flaw.
[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)
Maian Guardian 2.1 license generator has a command injection that runs code as www-data.
VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerability
Komodo Periphery before 2.3.0 lets authenticated users inject OS commands via CVE-2026-110005.
arbitrary command execution in fgfmsd daemon
FortiManager fgfmd command injection allows code execution only if the attacker already holds a cluster node key.
[vim-security] Command Execution via Rmd Syntax Highlighting in Vim < 9.2.1178
Vim before 9.2.1178 can run OS commands via R Markdown syntax highlighting; no CVE yet.
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
Disclosure: RCDevs WebADM 2.4.14 log viewer command injection yields code execution as uid 999.
[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)
Maian Cart 3.8 allows unrestricted banner uploads that become PHP webshells for administrator command execution.
[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)
Circutor LineEds 24.11.14-r0 has unauthenticated command injection in pwrstudio via events.xml shellExecute.
[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)
Researchers disclosed command injection in Asustor ADM 3.5.9 music.cgi on the AS602T, rated 8.8.
[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)
Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR field allows command injection to root RCE.
[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
Teltonika RutOS 00.07.06.21 has an authenticated ipsec.lua command injection that runs commands as root.
[0day-rubbish] Opengear NGCS 25.11.8 Authenticated PDU name command injection to root via io.popen (8.8)
Researchers disclosed an authenticated Opengear NGCS 25.11.8 command-injection bug that executes commands as root.
[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)
0day Rubbish discloses a CVSS 8.8 shell command injection in core-admin 1.0.164 via ineffective quote escaping, enabling authenticated remote code execution.
[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)
OP5 Monitor 9.20 remains vulnerable to CVSS 8.8 command injection because the CVE-2025-34115 fix is opt-in and ineffective.
**Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)
Tozed ZLT X300 5G CPE firmware 6.01.3 has an unauthenticated TR-069 command injection (CVE-2026-2035703, CVSS 9.8) enabling root code execution.