Falhas do tipo CWE-78
4.569 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2025-9752MEDIUMD-Link DIR-852 SOAP Service soap.cgi soapcgi_main os command injectionEPSS 16.6%CVE-2022-2314—VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function CallEPSS 16.5%CVE-2026-59726CRITICALRuflo: Unauthenticated RCE in MCP bridge default docker-compose deploymentEPSS 16.4%CVE-2018-15442HIGHCisco Webex Meetings Desktop App Update Service Command Injection VulnerabilityEPSS 16.0%CVE-2023-29778CRITICALGL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.EPSS 16.0%CVE-2017-20215HIGHFLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command InjectionEPSS 15.8%CVE-2022-31898MEDIUMgl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the pEPSS 15.8%CVE-2025-59366CRITICALAn authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba funcEPSS 15.8%CVE-2025-48047CRITICALMICI Network Co. Ltd. NetFax Server Command InjectionEPSS 15.7%CVE-2024-9054HIGHRemote code Execution inTimeProvider® 4100EPSS 15.6%CVE-2026-2131MEDIUMXixianLiang HarmonyOS-mcp-server input_text os command injectionEPSS 15.6%CVE-2026-4631CRITICALCockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injectionEPSS 15.5%CVE-2023-23596HIGHjc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with EPSS 15.2%CVE-2026-5850CRITICALTotolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injectionEPSS 15.1%CVE-2024-53942MEDIUMAn issue was discovered on NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic/radio endpoint is vulnerable to command inEPSS 15.0%CVE-2025-5441MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injectionEPSS 15.0%CVE-2025-5446MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injectionEPSS 15.0%CVE-2025-5442MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_pingGatewayByBBS os command injectionEPSS 15.0%CVE-2025-5444MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injectionEPSS 14.9%CVE-2025-5443MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injectionEPSS 14.9%