Falhas do tipo CWE-78
5.061 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2021-33191—MiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocolEPSS 4.0%CVE-2024-33896HIGHCosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parametEPSS 4.0%CVE-2012-10041CRITICALWAN Emulator v2.3 Command ExecutionEPSS 4.0%CVE-2022-50596CRITICALD-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command InjectionEPSS 4.0%CVE-2024-2853MEDIUMTenda AC10U setsambacfg formSetSambaConf os command injectionEPSS 4.0%CVE-2024-2851MEDIUMTenda AC15 setsambacfg formSetSambaConf os command injectionEPSS 4.0%CVE-2026-61498CRITICALVitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.phpEPSS 4.0%CVE-2026-41925CRITICALWDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)EPSS 4.0%CVE-2018-3785—A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.EPSS 4.0%CVE-2024-2909HIGHRuijie RG-EG350 HTTP POST Request setAction os command injectionEPSS 4.0%CVE-2024-51503HIGHA security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate pEPSS 4.0%CVE-2018-25126CRITICALTVT NVMS-9000 Hard-coded API Credentials & Command InjectionEPSS 4.0%CVE-2018-10900HIGHNetwork Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line characEPSS 4.0%CVE-2017-10951—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interactiEPSS 4.0%CVE-2026-3102MEDIUMexiftool PNG File MacOS.pm SetMacOSTags os command injectionEPSS 4.0%CVE-2024-2353HIGHTotolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injectionEPSS 4.0%CVE-2023-6320CRITICALCommand injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpointEPSS 4.0%CVE-2025-34044CRITICALWIFISKY 7-Layer Flow Control Router Remote Command ExecutionEPSS 3.9%CVE-2022-21668HIGHPipenv's requirements.txt parsing allows malicious index url in commentsEPSS 3.9%CVE-2021-21018CRITICALMagnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code ExecutionEPSS 3.9%