Fallos del tipo CWE-78

5063 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2025-69212CRITICALOpenSTAManager has an OS Command Injection in P7M File ProcessingEPSS 1.9%CVE-2026-8051HIGHOS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges toEPSS 1.9%CVE-2026-87680HIGHA command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated uEPSS 1.9%CVE-2025-66178MEDIUMA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 througEPSS 1.9%CVE-2026-9477CRITICALTotolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injectionEPSS 1.9%CVE-2026-9454CRITICALTotolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injectionEPSS 1.9%CVE-2026-9455CRITICALTotolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injectionEPSS 1.9%CVE-2026-9456CRITICALTotolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injectionEPSS 1.9%CVE-2026-9475CRITICALTotolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injectionEPSS 1.9%CVE-2026-9478CRITICALTotolink A8000RU Web Management cstecgi.cgi setParentalRules os command injectionEPSS 1.9%CVE-2026-9476CRITICALTotolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injectionEPSS 1.9%CVE-2026-9435CRITICALTotolink A8000RU Web Management cstecgi.cgi setQosCfg os command injectionEPSS 1.9%CVE-2026-17402CRITICALMultiple Vulnerabilities in IBM API ConnectEPSS 1.9%CVE-2023-27514HIGHOS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versiEPSS 1.9%CVE-2023-27521HIGHOS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F vEPSS 1.9%CVE-2023-40072HIGHOS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS commaEPSS 1.9%CVE-2024-12985MEDIUMOvertek OT-E801G passwd os command injectionEPSS 1.9%CVE-2020-5146—A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parametEPSS 1.9%CVE-2026-9424MEDIUMEdimax EW-7438RPn Content-Type formWlanMP os command injectionEPSS 1.9%CVE-2025-44880CRITICALA command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commandEPSS 1.9%