Weaknesses of type CWE-78

4,576 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-2082MEDIUMD-Link DIR-823X set_mac_clone os command injectionEPSS 5.1%CVE-2026-8767LOWvercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injectionEPSS 5.1%CVE-2021-27249HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-FiEPSS 5.1%CVE-2026-5844HIGHD-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injectionEPSS 5.1%CVE-2026-25108HIGHFileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a speciallEPSS 5.1%KEVCVE-2018-10900HIGHNetwork Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line characEPSS 5.1%CVE-2024-4255MEDIUMRuijie RG-UAC gre_edit_commit.php os command injectionEPSS 5.0%CVE-2020-7350MEDIUMMetasploit Framework Plugin Libnotify Command InjectionEPSS 5.0%CVE-2025-36846CRITICALAn issue was discovered in Eveo URVE Web Manager 27.02.2025. The application exposes a /_internal/pc/vpro.php localhost endpoint to unauthenEPSS 5.0%CVE-2026-41922CRITICALWDR201A WiFi Extender OS Command Injection via wireless.cgiEPSS 5.0%CVE-2026-24763HIGHAuthenticated Command Injection in OpenClaw Docker Execution via PATH Environment VariableEPSS 5.0%CVE-2019-5141HIGHAn exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13. A specially EPSS 4.9%CVE-2025-7788MEDIUMXuxueli xxl-job SampleXxlJob.java commandJobHandler os command injectionEPSS 4.9%CVE-2017-14429CRITICALThe DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) deviceEPSS 4.9%CVE-2022-26518CRITICALAn OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-EPSS 4.9%CVE-2024-0292MEDIUMTotolink LR1200GB cstecgi.cgi setOpModeCfg os command injectionEPSS 4.9%CVE-2026-5351MEDIUMTrendnet TEW-657BRM setup.cgi add_wps_client os command injectionEPSS 4.9%CVE-2026-4558HIGHLinksys MR9600 SmartConnect.lua smartConnectConfigure os command injectionEPSS 4.9%CVE-2018-11616—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interactEPSS 4.9%CVE-2026-6516CRITICALRemote Code ExecutionEPSS 4.9%