command injection

Everything Patch Review has reported about command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Urgent: Upgrade Collabora Online to 26.4.303 to Patch Actively Exploited Command Injection

Attackers are exploiting a critical command injection flaw in Collabora Online’s built-in CODE Server. Users must upgrade to version 26.4.303 or later immediately.

Oct 14, 2026

Vulnerabilities

Apply October Patch to Fix Exploited Windows Shell Command Injection

Microsoft patches CVE-2026-96951, a high-severity flaw that bypasses Mark of the Web protections and was exploited in the wild.

Oct 13, 2026