Falhas do tipo CWE-78
5.059 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2019-5128CRITICALA command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. ExploitableEPSS 30.2%CVE-2018-19949CRITICALIf exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue EPSS 30.2%KEVCVE-2024-22836CRITICALAn OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company locale when installing EPSS 30.0%CVE-2023-4474CRITICALThe improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmwareEPSS 29.7%CVE-2023-38886—An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script.EPSS 29.6%CVE-2024-20356HIGHA vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote aEPSS 29.6%CVE-2017-5173—An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0EPSS 29.6%CVE-2024-5585HIGHCommand injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)EPSS 28.8%CVE-2026-4480CRITICALSamba: samba: remote code execution in printing subsystem via unescaped job descriptionEPSS 28.7%CVE-2022-45768HIGHCommand Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitraryEPSS 28.7%CVE-2024-10443CRITICALImproper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in SynoloEPSS 28.5%CVE-2023-5372HIGHThe post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versiEPSS 28.5%CVE-2023-34800CRITICALD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.EPSS 28.4%CVE-2024-11120CRITICALGeoVision EOL devices - OS Command InjectionEPSS 28.4%KEVCVE-2025-5965HIGHRCE via the backup feature available only to user with high privilegeEPSS 28.2%CVE-2019-19356HIGHNetis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability haEPSS 28.1%KEVCVE-2021-40410CRITICALAn OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] thEPSS 27.9%CVE-2021-40412CRITICALAn OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [8] theEPSS 27.5%CVE-2021-30358—Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from othEPSS 27.5%CVE-2025-54987CRITICALA vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious EPSS 27.3%