Everything RedTeam Tribune has reported about OS Command Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity flaw in the SPIP odt2spip plugin allows authenticated authors to execute arbitrary commands on the web server via crafted filenames, a risk mitigated in version 4.4.0.
A critical flaw in the Samsung platform allows OS command injection, rated 9.8. No patch status is provided in the source material.
NVD rates CVE-2026-108540 as critical due to remote OS command injection in OpenSpug Spug up to version 4.0.1, with no vendor response.