Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityKEVEPSS 71.7%Aug 13, 2026
- Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityKEVEPSS 1.0%Jul 27, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Jul 6, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityKEVEPSS 2.1%Jun 26, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 76.1%Jun 9, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityKEVEPSS 99.9%Jun 9, 2026
- Low1.3A vulnerability has been found in vercel ai up to 3.0.97.EPSS 7.0%May 17, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…EPSS 0.6%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…EPSS 0.6%May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…EPSS 0.7%May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…EPSS 0.5%May 12, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- Critical9.8OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.EPSS 0.9%May 7, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.6%Apr 17, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.6%Apr 17, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.6%Apr 17, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 47.4%Apr 14, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityKEVEPSS 20.0%Mar 11, 2026
- High8.7Soliton Systems K.K FileZen OS Command Injection VulnerabilityKEVEPSS 5.2%Feb 12, 2026
- Critical9.9BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityKEVEPSS 91.7%Feb 6, 2026
- High8.5An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code.EPSS 1.5%Feb 2, 2026
- High7.8pnpm is a package manager.EPSS 1.0%Jan 7, 2026
- High8.8OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the modu…EPSS 2.1%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in fi…EPSS 2.6%Dec 11, 2025