Weaknesses of type CWE-78

5,063 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-7037CRITICALTotolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injectionEPSS 1.8%CVE-2024-42502HIGHAuthenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line InterfaceEPSS 1.8%CVE-2026-7156CRITICALTotolink A8000RU CGI cstecgi.cgi CsteSystem os command injectionEPSS 1.8%CVE-2023-5002MEDIUMPgadmin4: remote code execution by an authenticated userEPSS 1.8%CVE-2026-71904HIGHDrayTek VigorAP Multiple Models OS Command Injection via tr069TestInformEPSS 1.8%CVE-2020-2028HIGHPAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verificationEPSS 1.8%CVE-2026-71931HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgradeEPSS 1.8%CVE-2026-71916HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via commandTableEPSS 1.8%CVE-2026-71913HIGHDrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgiEPSS 1.8%CVE-2005-10003MEDIUMmikexstudios Xcomic os command injectionEPSS 1.8%CVE-2025-44960HIGHRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.EPSS 1.8%CVE-2024-50569MEDIUMA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allowsEPSS 1.8%CVE-2021-3050HIGHPAN-OS: OS Command Injection Vulnerability in Web InterfaceEPSS 1.8%CVE-2026-102911CRITICALzosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injectionEPSS 1.8%CVE-2023-48667HIGH Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in EPSS 1.8%CVE-2026-85425CRITICALMOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSEPSS 1.8%CVE-2026-26832CRITICALnode-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versions through 2.2.1, the recognize() functEPSS 1.8%CVE-2026-26355MEDIUMDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1EPSS 1.8%CVE-2025-10619MEDIUMsequa-ai sequa-mcp OAuth Server Discovery node-oauth-client-provider.ts redirectToAuthorization os command injectionEPSS 1.8%CVE-2023-49038HIGHCommand injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto tEPSS 1.8%