773 PoCs | 119 CISA KEV

tag

Argument-Injection

Cisco IMC Argument Injection to Root RCE (CVE-2026-20200)

CVE-2026-20200 / NSIDE-SA-2026-003 network Patched

CVE-2026-20200 / NSIDE-SA-2026-003networkCRITICAL 9.9Patched2026-08-16Weblate Arbitrary File Read via ssh-keyscan Host Argument Injection — CVE-2026-24126

CVE-2026-24126 web Patched

CVE-2026-24126webHIGH 6.5Patched2026-07-05Prefect GitRepository Git Argument Injection RCE via `commit_sha` — CVE-2026-5366

CVE-2026-5366 (Huntr bounty e2e88a0f-a8f6-49c9-94c5-e98dc385f07a) web Patched

CVE-2026-5366webHIGHPatched2026-07-05Pardus Software Center Local Privilege Escalation via APT Option Injection (CVE-2026-14459 / CVE-2026-14460)

CVE-2026-14459 (also covers CVE-2026-14460) binary Patched

CVE-2026-14459binaryHIGH 8.8Patched2026-07-05Fireshare Unauthenticated Arbitrary File Write/Overwrite — CVE-2026-54337

CVE-2026-54337 (see [GHSA-hmh2-6g84-q8jx](https://github.com/ShaneIsrael/fireshare/security/advisories/GHSA-hmh2-6g84-q8jx)) web Unverified

CVE-2026-54337webINFOUnverified2026-07-05exiftool-vendored.js Argument Injection via Newline-Delimited Tag Names (CVE-2026-43893)

CVE-2026-43893 / GHSA-cw26-7653-2rp5 misc Patched

CVE-2026-43893 / GHSA-cw26-7653-2rp5miscHIGH 8.2Patched2026-07-05Cockpit Unauthenticated Remote Code Execution via SSH Argument Injection (CVE-2026-4631) EPSS 15%

CVE-2026-4631 (GHSA-m4gv-x78h-3427) web Patched

CVE-2026-4631webCRITICAL 9.8Patched2026-07-05