Weaknesses of type CWE-78

5,063 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-71915HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatusEPSS 2.3%CVE-2026-71918HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via webBackupActionEPSS 2.3%CVE-2026-71927HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via rebDeviceEPSS 2.3%CVE-2026-71907HIGHDrayTek VigorAP Multiple Models OS Command Injection via setcamsetEPSS 2.3%CVE-2026-71923HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via auth_setEPSS 2.3%CVE-2026-71905HIGHDrayTek VigorAP Multiple Models OS Command Injection via ExportSettingsEPSS 2.3%CVE-2026-71928HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via fdftDeviceEPSS 2.3%CVE-2026-85012HIGHOS command injection in the Amazon CodeCatalyst blueprints SDKEPSS 2.3%CVE-2026-86102CRITICALWatchGuard AP Command Injection in Internal Management API Allows Command ExecutionEPSS 2.3%CVE-2026-19243MEDIUMHKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injectionEPSS 2.3%CVE-2026-64879CRITICALCommand InjectionEPSS 2.3%CVE-2026-77876HIGHControl Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryEPSS 2.3%CVE-2019-11829HIGHOS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote attackers to executeEPSS 2.2%CVE-2020-5332HIGHRSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious user with administratoEPSS 2.2%CVE-2020-2007HIGHPAN-OS: OS command injection in management serverEPSS 2.2%CVE-2020-2010HIGHPAN-OS: Authenticated user command injection vulnerabilityEPSS 2.2%CVE-2021-33841CRITICALCircutor SGE-PLC1000 OS command InjectionEPSS 2.2%CVE-2024-53940HIGHAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /cgi-bin/luci/admin eEPSS 2.2%CVE-2023-43892CRITICALNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This EPSS 2.2%CVE-2026-9437MEDIUMDTStack Taier REST API Runtime.exec os command injectionEPSS 2.2%