CWE-146 · Injection and Smuggling
Improper Neutralization of Expression/Command Delimiters
10CVEs
SortMost likely exploited
10 CVEs with CWE-146 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-20128Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 7.2 · 2023-04-05 | 7.2 | 30% | 2023-04-05 |
| CVE-2023-20117Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 7.2 · 2023-04-05 | 7.2 | 30% | 2023-04-05 |
| CVE-2024-20329Cisco Adaptive Security Appliance Software Remote Command Injection VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 9.9 · 2024-10-23 | 9.9 | 1.2% | 2024-10-23 |
| CVE-2022-4055When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included…Freedesktop · xdg-utils · CVSS 7.4 · 2022-11-18 | 7.4 | 0.7% | 2022-11-18 |
| CVE-2026-20288Cisco IMC Remote Code Execution Vulnerability Remote Code Execution VulnerabilityCisco · Cisco Enterprise NFV Infrastructure Software · CVSS 6.5 · 2026-08-05 | 6.5 | 0.6% | 2026-08-05 |
| CVE-2025-53192Apache Commons OGNL: Expression Injection leading to RCEApache Software Foundation · Apache Commons OGNL · CVSS 8.8 · 2025-08-18 | 8.8 | 0.6% | 2025-08-18 |
| CVE-2024-20470Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution VulnerabilityCisco · Cisco Small Business RV Series Router Firmware · CVSS 6.5 · 2024-10-02 | 6.5 | 0.6% | 2024-10-02 |
| CVE-2026-22266Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privilege…Dell · PowerProtect Data Manager · CVSS 4.7 · 2026-02-19 | 4.7 | 0.3% | 2026-02-19 |
| CVE-2023-20035Cisco IOS XE SD-WAN Software Command Injection VulnerabilityCisco · Cisco IOS XE Software · CVSS 7.8 · 2023-03-23 | 7.8 | 0.2% | 2023-03-23 |
| CVE-2025-20237A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local att…Cisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 6 · 2025-08-14 | 6.0 | 0.2% | 2025-08-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.