Weaknesses of type CWE-78

4,653 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-22708HIGHCursor has a Terminal Tool Allowlist Bypass via Environment VariablesEPSS 0.8%CVE-2026-64878CRITICALCommand InjectionEPSS 0.8%CVE-2026-41613HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-54084HIGHCalix Gigacenter ONT - Command InjectionEPSS 0.8%CVE-2026-42563HIGHDulwich Vulnerable to Command Injection via Merge Driver PathEPSS 0.8%CVE-2020-3367MEDIUMCisco Secure Web Appliance Privilege Escalation VulnerabilityEPSS 0.8%CVE-2026-31995MEDIUMOpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster ExtensionEPSS 0.8%CVE-2026-16906HIGHIBM i is Affected By Multiple Vulnerabilities in Domain Name SystemEPSS 0.8%CVE-2026-46746HIGHA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input iEPSS 0.8%CVE-2026-82098HIGHDataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareEPSS 0.8%CVE-2026-78575HIGHLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsEPSS 0.8%CVE-2024-46329HIGHVONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.EPSS 0.8%CVE-2026-17623HIGHLangflow is affected OS Command Injection in Model Context Protocol featuresEPSS 0.8%CVE-2026-18835CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2026-16816CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2026-17642HIGHIBM i is Affected By Remote Code Execution Vulnerabilities [, ]EPSS 0.8%CVE-2026-17417HIGHIBM i is Affected By Remote Code Execution Vulnerabilities [, ]EPSS 0.8%CVE-2024-54008HIGHAuthenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management PlatformEPSS 0.8%CVE-2024-11858HIGHRadare2: command injection via pebble application files in radare2EPSS 0.8%CVE-2026-91102HIGHHP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesEPSS 0.8%