command injection

Everything Firewall Chronicle has reported about command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Coze Studio 0.5.0 Predecessors Exposed to Command Injection via Python Nodes

A default configuration flaw in Coze Studio allows registered users to execute unsandboxed Python code, potentially exposing sensitive credentials and internal services.

Oct 20, 2026

Vulnerabilities

H3C Magic NX15 OS Command Injection in usrlist Binary Enables Remote Code Execution With Public Exploit

A critical OS command injection flaw in H3C Magic NX15 100R017 firmware allows remote attackers to execute arbitrary commands, with public exploits already available.

Oct 20, 2026