Weaknesses of type CWE-78

4,660 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2024-6048CRITICALOpenfind MailGates and MailAudit - OS Command InjectionEPSS 0.7%CVE-2025-3883HIGHeCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution VulnerabilityEPSS 0.7%CVE-2025-3881HIGHeCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-49366HIGHIn JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionEPSS 0.7%CVE-2026-84422HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.7%CVE-2025-46418HIGHWestermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.EPSS 0.7%CVE-2019-1709MEDIUMCisco Firepower Threat Defense Software Command Injection VulnerabilityEPSS 0.7%CVE-2026-84436CRITICALIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.7%CVE-2025-51958CRITICALaelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system commands via lib/pluginEPSS 0.7%CVE-2023-48380HIGHSoftnext Mail SQR Expert - Command InjectionEPSS 0.7%CVE-2025-9494HIGHViessmann Vitogate 300 OS Command InjectionEPSS 0.7%CVE-2026-91931CRITICALFlowise before 3.1.4 Remote Code Execution via Custom MCP npxEPSS 0.7%CVE-2024-28015CRITICALImproper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WGEPSS 0.7%CVE-2025-40949HIGHA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEEPSS 0.7%CVE-2026-33791HIGHJunos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as rootEPSS 0.7%CVE-2026-79724CRITICALLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsEPSS 0.7%CVE-2026-17566CRITICALpgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)EPSS 0.7%CVE-2024-28767MEDIUMIBM Security Directory Integrator command executionEPSS 0.7%CVE-2026-72881MEDIUMDokploy: Command Injection via database credentials in backup/restore commandsEPSS 0.7%CVE-2024-48074HIGHAn authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into tEPSS 0.7%