CWE-284 (2633) CWE-79 (1817) CWE-416 (1289) CWE-862 (1174) CWE-89 (1095) CWE-22 (1022) CWE-125 (878) CWE-200 (846) CWE-306 (837) CWE-122 (829) CWE-20 (793) CWE-78 (708) CWE-918 (688) CWE-787 (681) CWE-94 (639) CWE-863 (617) CWE-74 (600) CWE-639 (538) CWE-400 (521) CWE-269 (501) CWE-119 (494) CWE-502 (468) CWE-770 (438) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (366) CWE-362 (322) CWE-352 (275) CWE-285 (243)

CWE-78

708 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-4802 — — 0.0102 2026-05-11 A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary comman
CVE-2026-44724 — — 0.0092 2026-05-27 systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linu
CVE-2026-10520 — — 0.9991 — Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability w KEV
CVE-2026-25089 — — 0.7611 — Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vul KEV
CVE-2026-44168 — — 0.0059 2026-06-12 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26
CVE-2026-73570 — — 0.7166 — Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an KEV
CVE-2026-83549 — — 0.0989 — SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remo KEV
CVE-2026-106931 — — 0.0253 — EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which ma KEV