Weaknesses of type CWE-78

4,601 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-71929HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via setDevProtoEPSS 2.3%CVE-2026-71927HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via rebDeviceEPSS 2.3%CVE-2026-71909HIGHDrayTek VigorAP Multiple Models OS Command Injection via InquierTimeEPSS 2.3%CVE-2026-71915HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatusEPSS 2.3%CVE-2026-71919HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via sysrebootEPSS 2.3%CVE-2026-71930HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via setTimeEPSS 2.3%CVE-2026-71925HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via getDetailEPSS 2.3%CVE-2026-85012HIGHOS command injection in the Amazon CodeCatalyst blueprints SDKEPSS 2.3%CVE-2026-42062CRITICALELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted requesEPSS 2.3%CVE-2026-19243MEDIUMHKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injectionEPSS 2.3%CVE-2026-64879CRITICALCommand InjectionEPSS 2.3%CVE-2026-33277HIGHAn OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.EPSS 2.3%CVE-2022-4978CRITICALSteppschuh Remote Control Server 3.1.1.12 Unauthenticated RCEEPSS 2.3%CVE-2025-56107HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request tEPSS 2.3%CVE-2016-10541—The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications thatEPSS 2.3%CVE-2019-11829HIGHOS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote attackers to executeEPSS 2.2%CVE-2026-30880CRITICALbaserCMS: OS command injection vulnerability in installerEPSS 2.2%CVE-2020-5332HIGHRSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious user with administratoEPSS 2.2%CVE-2020-2007HIGHPAN-OS: OS command injection in management serverEPSS 2.2%CVE-2020-2010HIGHPAN-OS: Authenticated user command injection vulnerabilityEPSS 2.2%