Fallos del tipo CWE-78

5063 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2026-7037CRITICALTotolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injectionEPSS 1.8%CVE-2024-42502HIGHAuthenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line InterfaceEPSS 1.8%CVE-2026-7156CRITICALTotolink A8000RU CGI cstecgi.cgi CsteSystem os command injectionEPSS 1.8%CVE-2023-5002MEDIUMPgadmin4: remote code execution by an authenticated userEPSS 1.8%CVE-2026-71904HIGHDrayTek VigorAP Multiple Models OS Command Injection via tr069TestInformEPSS 1.8%CVE-2020-2028HIGHPAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verificationEPSS 1.8%CVE-2026-71931HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgradeEPSS 1.8%CVE-2026-71916HIGHDrayTek VigorSwitch Multiple Models OS Command Injection via commandTableEPSS 1.8%CVE-2026-71913HIGHDrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgiEPSS 1.8%CVE-2005-10003MEDIUMmikexstudios Xcomic os command injectionEPSS 1.8%CVE-2025-44960HIGHRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.EPSS 1.8%CVE-2024-50569MEDIUMA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allowsEPSS 1.8%CVE-2021-3050HIGHPAN-OS: OS Command Injection Vulnerability in Web InterfaceEPSS 1.8%CVE-2026-102911CRITICALzosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injectionEPSS 1.8%CVE-2023-48667HIGH Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in EPSS 1.8%CVE-2026-85425CRITICALMOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSEPSS 1.8%CVE-2026-26832CRITICALnode-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versions through 2.2.1, the recognize() functEPSS 1.8%CVE-2026-26355MEDIUMDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1EPSS 1.8%CVE-2025-10619MEDIUMsequa-ai sequa-mcp OAuth Server Discovery node-oauth-client-provider.ts redirectToAuthorization os command injectionEPSS 1.8%CVE-2023-49038HIGHCommand injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto tEPSS 1.8%