Fallos del tipo CWE-78

4653 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2026-22708HIGHCursor has a Terminal Tool Allowlist Bypass via Environment VariablesEPSS 0.8%CVE-2026-64878CRITICALCommand InjectionEPSS 0.8%CVE-2026-41613HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-54084HIGHCalix Gigacenter ONT - Command InjectionEPSS 0.8%CVE-2026-42563HIGHDulwich Vulnerable to Command Injection via Merge Driver PathEPSS 0.8%CVE-2020-3367MEDIUMCisco Secure Web Appliance Privilege Escalation VulnerabilityEPSS 0.8%CVE-2026-31995MEDIUMOpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster ExtensionEPSS 0.8%CVE-2026-16906HIGHIBM i is Affected By Multiple Vulnerabilities in Domain Name SystemEPSS 0.8%CVE-2026-46746HIGHA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input iEPSS 0.8%CVE-2026-82098HIGHDataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareEPSS 0.8%CVE-2026-78575HIGHLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsEPSS 0.8%CVE-2024-46329HIGHVONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.EPSS 0.8%CVE-2026-17623HIGHLangflow is affected OS Command Injection in Model Context Protocol featuresEPSS 0.8%CVE-2026-18835CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2026-16816CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2026-17642HIGHIBM i is Affected By Remote Code Execution Vulnerabilities [, ]EPSS 0.8%CVE-2026-17417HIGHIBM i is Affected By Remote Code Execution Vulnerabilities [, ]EPSS 0.8%CVE-2024-54008HIGHAuthenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management PlatformEPSS 0.8%CVE-2024-11858HIGHRadare2: command injection via pebble application files in radare2EPSS 0.8%CVE-2026-91102HIGHHP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesEPSS 0.8%