Skip to content
BackEsc
Sign in

CWE-88 · weakness in Command and Code Injection

Improper Neutralization of Argument Delimiters in a Command

470 CVEs · 4 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
4
check available
4
likely to be exploited
23

Every one of the 470 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. WordPress PHPMailer < 5.2.18 - Remote Code ExecutionCVE-2016-10033PHP · CVSS 9.8 · 100% likely

    PHP

  2. telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.CVE-2026-24061GNU · CVSS 9.8 · 99% likelycovered by CyberSIXT

    GNU1 article1 article this week: PRODAFT uncovers BBNet Linux botnet with 11 exploits

  3. A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticate…CVE-2024-41710Mitel · CVSS 6.8 · 42% likely

    Mitel

  4. SSH session privilege manipulation via a crafted username in Mikrotik RouterOSCVE-2026-86060Mikrotik · CVSS 9.2 · 6.4% likelycovered by CyberSIXT

    MikroTik8 articles

  5. Ruby Dragonfly <1.4.0 - Remote Code ExecutionCVE-2021-3356472% likely
  6. Inspur ClusterEngine 4.0 - Remote Code ExecutionCVE-2020-2122439% likely
  7. LearnPress < 4.2.5.8 - Remote Code ExecutionCVE-2023-6634thimpress · CVSS 8.1 · 8.6% likely

    ThimPress

  8. Gotenberg <= 8.30.1 - Remote Code ExecutionCVE-2026-40281gotenberg · CVSS 10 · 2.3% likely

    Gotenberg

  9. Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the…CVE-2007-088299% likely
  10. Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…CVE-2018-1745697% likely
  11. University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/ima…CVE-2018-1951896% likelycovered by CyberSIXT

    1 article

  12. H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSC…CVE-2022-23221CVSS 9.8 · 65% likely
  13. Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code wi…CVE-2020-5792Nagios XI · 64% likely
  14. mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .…CVE-2019-645355% likely
  15. Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which all…CVE-2004-012148% likely
  16. Laravel allows environment manipulation via query stringCVE-2024-52301laravel · CVSS 8.7 · 45% likely

    Laravel

  17. C-DATA Web Management System GET Parameter jumpto.php argument injectionCVE-2022-4257C-DATA · CVSS 6.3 · 44% likely

    CData

  18. Argument Injection Vulnerability in CommServeCVE-2025-57791Commvault · CVSS 6.9 · 39% likely

    Commvault

  19. Remote Code Execution (RCE)CVE-2022-25766ungit · CVSS 8.8 · 35% likely
  20. In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settingsCVE-2026-49373JetBrains · CVSS 7.1 · 33% likely

    JetBrains

  21. Cisco Modeling Labs Web UI Command Injection VulnerabilityCVE-2021-1531Cisco · CVSS 8.8 · 30% likely

    Cisco

  22. Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted atta…CVE-2006-469230% likely
  23. TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrate…CVE-2020-1369926% likely
  24. Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject…CVE-2022-37027CVSS 7.2 · 22% likely
  25. Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// U…CVE-2003-090722% likely
  26. Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary…CVE-2001-015018% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in