Weaknesses of type CWE-78

5,015 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-105134CRITICALAhsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectionEPSS 81.8%KEVCVE-2023-34992CRITICALA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to eEPSS 81.7%CVE-2024-23108CRITICALAn improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to EPSS 80.3%CVE-2024-8957HIGHPTZOptics NDI and SDI Cameras Command Injection via NTP Address ConfigurationEPSS 79.8%KEVCVE-2020-10987CRITICALThe goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via tEPSS 79.8%KEVCVE-2022-2487HIGHWAVLINK WN535K2/WN535K3 nightled.cgi os command injectionEPSS 79.3%CVE-2021-20039HIGHImproper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authentiEPSS 78.7%CVE-2025-0107HIGHExpedition: OS Command Injection VulnerabilityEPSS 78.4%CVE-2022-24288—Apache Airflow: RCE in example DAGsEPSS 78.4%CVE-2020-8816CRITICALPi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.EPSS 78.3%KEVCVE-2020-10221HIGHlib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacteEPSS 77.1%KEVCVE-2017-12243—A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco EPSS 77.1%CVE-2019-15949HIGHNagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as tEPSS 77.0%KEVCVE-2025-6514CRITICALOS command injection in mcp-remote when connecting to untrusted MCP serversEPSS 77.0%CVE-2023-44221HIGHImproper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrEPSS 76.3%KEVCVE-2024-8504HIGHVICIdial Authenticated Remote Code ExecutionEPSS 76.2%CVE-2022-2884CRITICALA vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authEPSS 76.2%CVE-2026-25089CRITICALA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 thEPSS 76.1%KEVCVE-2026-2041HIGHNagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution VulnerabilityEPSS 75.6%CVE-2026-2043HIGHNagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution VulnerabilityEPSS 75.4%