Fallos del tipo CWE-78
3849 resultadosCVE-2023-39236HIGHASUS RT-AC86U - Command injection vulnerability - 4EPSS 1.1%CVE-2023-38033HIGHASUS RT-AC86U - Command injection vulnerability - 3EPSS 1.1%CVE-2024-10202HIGHWellchoose Administrative Management System - OS Command InjectionEPSS 1.1%CVE-2023-38032HIGHASUS RT-AC86U - Command injection vulnerability - 2EPSS 1.1%CVE-2023-39237HIGHASUS RT-AC86U - Command injection vulnerability - 5EPSS 1.1%CVE-2025-55589MEDIUMTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and cEPSS 1.1%CVE-2024-50566HIGHA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.EPSS 1.1%CVE-2022-25906HIGHAll versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes beEPSS 1.1%CVE-2025-7145HIGHTeamT5｜ThreatSonar Anti-Ransomware - OS Command InjectionEPSS 1.1%CVE-2024-2243HIGHCsmock: command injection vulnerability in csmock-plugin-snykEPSS 1.1%CVE-2025-15389HIGHQNO Technology｜VPN Firewall - OS Command InjectionEPSS 1.1%CVE-2026-26355MEDIUMDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1EPSS 1.1%CVE-2025-28035CRITICALTOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function tEPSS 1.1%CVE-2025-28036CRITICALTOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function EPSS 1.1%CVE-2025-28034CRITICALTOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000REPSS 1.1%CVE-2021-3725HIGHOS Command Injection in ohmyzsh/ohmyzshEPSS 1.1%CVE-2024-12010HIGHA post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.EPSS 1.1%CVE-2026-45087CRITICALDalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server ModeEPSS 1.1%CVE-2025-53472HIGHWRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilEPSS 1.1%CVE-2024-24890HIGHCommand injection in ioprobe of gala-gopherEPSS 1.1%