Falhas do tipo CWE-78
4.603 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2023-26153HIGHVersions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_EPSS 3.2%CVE-2024-10966MEDIUMTOTOLINK X18 cstecgi.cgi os command injectionEPSS 3.2%CVE-2022-42491CRITICALSeveral OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted netwEPSS 3.2%CVE-2022-42492CRITICALSeveral OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted netwEPSS 3.2%CVE-2024-23109CRITICALAn improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to EPSS 3.2%CVE-2025-8259MEDIUMVaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injectionEPSS 3.2%CVE-2020-5759—Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacEPSS 3.2%CVE-2020-37123CRITICALPinger 1.0 - Remote Code ExecutionEPSS 3.2%CVE-2026-32917CRITICALOpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCPEPSS 3.2%CVE-2025-1536MEDIUMRaisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injectionEPSS 3.2%CVE-2025-56819CRITICALAn issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.EPSS 3.2%CVE-2017-10953—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interactiEPSS 3.2%CVE-2023-50381HIGHThree os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craftedEPSS 3.2%CVE-2022-33194CRITICALFour OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 3.2%CVE-2022-33193CRITICALFour OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 3.2%CVE-2026-7698MEDIUMTiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injectionEPSS 3.2%CVE-2020-3332HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection VulnerabilityEPSS 3.2%CVE-2026-19035HIGHShibby Tomato qoslimit new_qoslimit_start os command injectionEPSS 3.2%CVE-2026-19036HIGHShibby Tomato wanoptions sub_40F88C os command injectionEPSS 3.2%CVE-2026-92397CRITICALRuijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injectionEPSS 3.2%