Everything Patch Observer has reported about Command Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical command injection flaw in end-of-life DrayTek Vigor2960 routers allows remote exploitation, with no active patching support confirmed for affected versions.
Admins can now patch a medium-severity flaw allowing root command execution on PAN-OS devices. Updates are available for most versions, with a fix ETA for others.
A critical vulnerability in the Node.js office-converter library allows remote command execution, requiring immediate attention for versions up to 1.0.2.