Weaknesses of type CWE-78

5,063 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-5978CRITICALTotolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injectionEPSS 1.8%CVE-2026-5975CRITICALTotolink A7100RU CGI cstecgi.cgi setDmzCfg os command injectionEPSS 1.8%CVE-2026-5994CRITICALTotolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injectionEPSS 1.8%CVE-2026-103056CRITICALAiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTREPSS 1.8%CVE-2025-29043CRITICALAn issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234EPSS 1.8%CVE-2022-37915CRITICALA vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attEPSS 1.8%CVE-2025-66208HIGHConfiguration-Dependent RCE (OS Command Injection) in richdocumentscode proxyEPSS 1.8%CVE-2024-44341HIGHD-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parametEPSS 1.8%CVE-2024-43649CRITICALAuthenticated command injection via <redacted>.exe <redacted> parameterEPSS 1.8%CVE-2024-37066MEDIUMA command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary coEPSS 1.8%CVE-2022-40720HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routerEPSS 1.8%CVE-2021-41254HIGHPrivilege escalation to cluster admin on multi-tenant environmentsEPSS 1.8%CVE-2026-7538CRITICALTotolink A8000RU CGI cstecgi.cgi vulnerability os command injectionEPSS 1.8%CVE-2022-1357CRITICALCambium Networks cnMaestro OS Command InjectionEPSS 1.8%CVE-2025-59157CRITICALCoolify has Git Repository RCEEPSS 1.8%CVE-2026-121621HIGHGithub.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configurationEPSS 1.8%CVE-2019-1896HIGHCisco Integrated Management Controller CSR Generation Command Injection VulnerabilityEPSS 1.8%CVE-2026-26331HIGHyt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` optionEPSS 1.8%CVE-2019-5072HIGHAn exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart DualEPSS 1.8%CVE-2025-65791CRITICALZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to theEPSS 1.8%