Fallos del tipo CWE-78

4603 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2026-2167MEDIUMTotolink WA300 cstecgi.cgi setAPNetwork os command injectionEPSS 2.4%CVE-2025-1370MEDIUMMicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injectionEPSS 2.4%CVE-2023-3975HIGHOS Command Injection in jgraph/drawioEPSS 2.3%CVE-2023-38208CRITICALValidate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 2.3%CVE-2020-5322CRITICALDell EMC OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated mEPSS 2.3%CVE-2023-38673CRITICALCommand injection in fs.pyEPSS 2.3%CVE-2020-11016CRITICALRemote code execution in Message sending functionality in IntelMQ ManagerEPSS 2.3%CVE-2026-22265HIGHRoxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCEEPSS 2.3%CVE-2020-36762MEDIUMONS Digital RAS Collection Instrument comment.yml jobs os command injectionEPSS 2.3%CVE-2026-65638CRITICALImproper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commaEPSS 2.3%CVE-2021-21386CRITICALImproper Neutralization of Argument Delimiters in a Decompiling Package ProcessEPSS 2.3%CVE-2024-52320CRITICALPlanet Technology Planet WGS-804HPT Command InjectionEPSS 2.3%CVE-2026-90705MEDIUMD-Link DWR-M921 Boa Dispatch Table formsysCmd os command injectionEPSS 2.3%CVE-2025-63911HIGHCohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.EPSS 2.3%CVE-2026-90706MEDIUMD-Link DWR-M921 formWsc os command injectionEPSS 2.3%CVE-2026-67261CRITICALDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in EPSS 2.3%CVE-2026-5059CRITICALaws-mcp-server AWS CLI Command Injection Remote Code Execution VulnerabilityEPSS 2.3%CVE-2026-5058CRITICALaws-mcp-server Command Injection Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-32766CRITICALQTS, QuTS hero, QuTScloudEPSS 2.3%CVE-2026-75486HIGHSynk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch NameEPSS 2.3%