← Back
CWE-77

3,618 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

JSON object

Loading...

CVEs (3,618)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-43842
1Rvc Project
1Retrieval Based Voice Conversion Webui
Jun 17, 2026
May 5, 2025
8.9 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables exp_dir1, np7, trainset_dir4 and sr2 take user input an...Show more
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables exp_dir1, np7, trainset_dir4 and sr2 take user input and pass it to the preprocess_dataset function, which concatenates them into a command that is run on the server. This can lead to arbitrary command execution. As of time of publication, no known patches exist.Show less
CVE-2024-57235
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function.
CVE-2024-57234
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.
CVE-2024-57233
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.
CVE-2024-57232
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.
CVE-2024-57231
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.
CVE-2024-57230
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.
CVE-2024-57229
1Netgear
1Rax50 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
CVE-2025-45042
1Tenda
1Ac9 Firmware
Jun 17, 2026
May 5, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.
CVE-2025-25504
1Niceforyou
1Gefen Webfwc
Jul 5, 2026
May 5, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and...Show more
An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.Show less
CVE-2025-45800
1Totolink
1A950rg Firmware
Jun 17, 2026
May 2, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.
CVE-2025-44877
1Tenda
1Ac9 Firmware
Jun 17, 2026
May 2, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a craf...Show more
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44872
1Tenda
1Ac9 Firmware
Jun 17, 2026
May 2, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a c...Show more
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44868
1Wavlink
1Wl Wn530h4 Firmware
Jun 17, 2026
May 2, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via...Show more
Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-46625
1Tenda
1Rx2 Pro Firmware
Jun 17, 2026
May 1, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the de...Show more
Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device.Show less
CVE-2025-44867
1Tenda
1W20e Firmware
Jun 17, 2026
May 1, 2025
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafte...Show more
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44866
1Tenda
1W20e Firmware
Jun 17, 2026
May 1, 2025
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted reques...Show more
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44865
1Tenda
1W20e Firmware
Jun 17, 2026
May 1, 2025
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted reque...Show more
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44864
1Tenda
1W20e Firmware
Jun 17, 2026
May 1, 2025
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted reque...Show more
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44863
1Totolink
1Ca300 Poe Firmware
Jun 17, 2026
May 1, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a cra...Show more
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less