Falhas do tipo CWE-78
5.059 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2026-105134CRITICALAhsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectionEPSS 81.8%KEVCVE-2023-34992CRITICALA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to eEPSS 81.7%CVE-2024-23108CRITICALAn improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to EPSS 80.3%CVE-2024-8957HIGHPTZOptics NDI and SDI Cameras Command Injection via NTP Address ConfigurationEPSS 79.8%KEVCVE-2020-10987CRITICALThe goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via tEPSS 79.8%KEVCVE-2022-2487HIGHWAVLINK WN535K2/WN535K3 nightled.cgi os command injectionEPSS 79.3%CVE-2021-20039HIGHImproper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authentiEPSS 78.7%CVE-2025-0107HIGHExpedition: OS Command Injection VulnerabilityEPSS 78.4%CVE-2022-24288—Apache Airflow: RCE in example DAGsEPSS 78.4%CVE-2020-8816CRITICALPi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.EPSS 78.3%KEVCVE-2020-10221HIGHlib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacteEPSS 77.3%KEVCVE-2017-12243—A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco EPSS 77.1%CVE-2019-15949HIGHNagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as tEPSS 77.0%KEVCVE-2025-6514CRITICALOS command injection in mcp-remote when connecting to untrusted MCP serversEPSS 77.0%CVE-2026-73570HIGHA remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installedEPSS 76.6%KEVCVE-2023-44221HIGHImproper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrEPSS 76.3%KEVCVE-2024-8504HIGHVICIdial Authenticated Remote Code ExecutionEPSS 76.2%CVE-2022-2884CRITICALA vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authEPSS 76.2%CVE-2026-25089CRITICALA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 thEPSS 76.1%KEVCVE-2026-2041HIGHNagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution VulnerabilityEPSS 75.6%