Falhas do tipo CWE-78
5.061 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2022-27804HIGHAn os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. iota All-In-One SEPSS 3.9%CVE-2026-101967CRITICALJunos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-101978HIGHJunos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-16492MEDIUMumijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injectionEPSS 3.9%CVE-2022-22140CRITICALAn os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specEPSS 3.9%CVE-2019-3919—The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent EPSS 3.9%CVE-2019-3920—The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTPEPSS 3.9%CVE-2020-3430HIGHCisco Jabber for Windows Protocol Handler Command Injection VulnerabilityEPSS 3.9%CVE-2026-31975HIGHCloud CLI WebSocket shell injectionEPSS 3.9%CVE-2021-28571HIGHAdobe After Effects improper neutralization of special elements could lead to remote code executionEPSS 3.9%CVE-2022-29851CRITICALdocumentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file EPSS 3.9%CVE-2025-34024CRITICALEdimax EW-7438RPn Mini OS Command Injection via mp.aspEPSS 3.9%CVE-2026-102059HIGHJunos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific informationEPSS 3.9%CVE-2024-51228MEDIUMAn issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1EPSS 3.9%CVE-2024-2854MEDIUMTenda AC18 setsambacfg formSetSambaConf os command injectionEPSS 3.9%CVE-2023-38120HIGHAdtran SR400ac ping Command Injection Remote Code Execution VulnerabilityEPSS 3.9%CVE-2021-1264CRITICALCisco DNA Center Command Runner Command Injection VulnerabilityEPSS 3.9%CVE-2021-21888CRITICALAn OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4EPSS 3.9%CVE-2026-105740CRITICALLangflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverEPSS 3.9%CVE-2018-19007—In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable tEPSS 3.9%