Weaknesses of type CWE-78

4,601 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-71986CRITICALMSI Radix AXE6600 v781521 Command Injection via dmz FunctionEPSS 2.5%CVE-2026-71988CRITICALMSI Radix AXE6600 v781521 Command Injection via portFw functionEPSS 2.5%CVE-2026-37281CRITICALAn OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execEPSS 2.5%CVE-2026-71991CRITICALMSI Radix AXE6600 v781521 Command Injection via TelnetSSH FunctionEPSS 2.5%CVE-2026-71987CRITICALMSI Radix AXE6600 v781521 Command Injection via alg functionEPSS 2.5%CVE-2026-71992CRITICALMSI Radix AXE6600 v781521 Command Injection via macfilterEPSS 2.5%CVE-2026-71990CRITICALMSI Radix AXE6600 v781521 Command Injection via TelnetSSH FunctionEPSS 2.5%CVE-2026-71993CRITICALMSI Radix AXE6600 v781521 Command Injection via openvpn functionEPSS 2.5%CVE-2026-71984CRITICALMSI Radix AXE6600 v781521 Command Injection via urlfilterEPSS 2.5%CVE-2026-63305CRITICALAVideo through 29.0 OS Command Injection via ffmpeg.json.phpEPSS 2.5%CVE-2026-63304CRITICALAVideo through 29.0 OS Command Injection via listFFmpegProcessesEPSS 2.5%CVE-2025-6620MEDIUMTOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injectionEPSS 2.5%CVE-2025-6621MEDIUMTOTOLINK CA300-PoE ap.so QuickSetting os command injectionEPSS 2.5%CVE-2026-65086MEDIUMNVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A suEPSS 2.4%CVE-2023-22643MEDIUMlibzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` callsEPSS 2.4%CVE-2022-46538CRITICALTenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.EPSS 2.4%CVE-2026-8217MEDIUMIndustrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injectionEPSS 2.4%CVE-2025-6619MEDIUMTOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injectionEPSS 2.4%CVE-2025-6618MEDIUMTOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injectionEPSS 2.4%CVE-2025-34049CRITICALOptiLink ONT1GEW GPON Remote Code ExecutionEPSS 2.4%