Weaknesses of type CWE-78

5,064 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-120238CRITICALWAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injectionEPSS 1.7%CVE-2026-120240CRITICALWAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injectionEPSS 1.7%CVE-2023-41345HIGHASUS RT-AX55 - command injection - 1EPSS 1.7%CVE-2026-120231CRITICALWAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injectionEPSS 1.7%CVE-2026-120196CRITICALWAVLINK WN579X3-D wapi.cgi port_forward os command injectionEPSS 1.7%CVE-2023-41348HIGHASUS RT-AX55 - command injection - 4EPSS 1.7%CVE-2022-3276HIGHPuppetlabs-mysql Command InjectionEPSS 1.7%CVE-2024-31977HIGHAdtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters EPSS 1.7%CVE-2024-8869LOWTOTOLINK A720R exportOvpn os command injectionEPSS 1.7%CVE-2023-33013HIGHA post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an auEPSS 1.7%CVE-2026-10144HIGHRsbuild < 2.0.9 Command Injection via openBrowser() URL HandlingEPSS 1.7%CVE-2026-53932HIGHwnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')EPSS 1.7%CVE-2026-42364CRITICALGeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerabilityEPSS 1.7%CVE-2026-59688HIGHProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore FunctionalityEPSS 1.7%CVE-2026-59686HIGHProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management InterfaceEPSS 1.7%CVE-2026-59687HIGHProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management InterfaceEPSS 1.7%CVE-2026-53975CRITICALOpenChamber 1.11.7 Unauthenticated RCE via /api/fs/execEPSS 1.7%CVE-2018-25122HIGHNagios XI < 5.4.13 Component Download Page RCEEPSS 1.7%CVE-2025-58763HIGHTautulli vulnerable to Authenticated Remote Code Execution via Command InjectionEPSS 1.7%CVE-2026-46449MEDIUMThe Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunEPSS 1.7%