Fallos del tipo CWE-78

5063 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2026-5663MEDIUMOFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionEPSS 2.0%CVE-2026-25836MEDIUMAn improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5EPSS 2.0%CVE-2026-74770HIGHDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS CommanEPSS 2.0%CVE-2025-56083HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 2.0%CVE-2026-7121CRITICALTotolink A8000RU CGI cstecgi.cgi setWizardCfg os command injectionEPSS 1.9%CVE-2026-72589CRITICALalseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook FieldEPSS 1.9%CVE-2021-4144—TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.EPSS 1.9%CVE-2009-20011CRITICALContentKeeper Web Appliance < 125.10 RCE via mimencodeEPSS 1.9%CVE-2025-34116HIGHIPFire < 2.19 Core Update 101 proxy.cgi RCEEPSS 1.9%CVE-2023-47618HIGHA post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1EPSS 1.9%CVE-2022-47853CRITICALTOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stablEPSS 1.9%CVE-2021-3723HIGHA command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 365EPSS 1.9%CVE-2026-24101CRITICALAn issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into suEPSS 1.9%CVE-2026-6644CRITICALA command injection vulnerability was found in the PPTP VPN Clients on the ADMEPSS 1.9%CVE-2025-15063CRITICALOllama MCP Server execAsync Command Injection Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-25851HIGHNetis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgiteEPSS 1.9%CVE-2022-22273—Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) pEPSS 1.9%CVE-2026-76146HIGHGenians, Inc Genian SSL PNS OS Command InjectionEPSS 1.9%CVE-2026-26323HIGHOpenClaw has a command injection in maintainer clawtributors updaterEPSS 1.9%CVE-2026-3841HIGHCommand Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400EPSS 1.9%