Falhas do tipo CWE-78

5.061 resultados

Injeção de comando do sistema operacional

A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.

Exemplo

Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Como mitigar

Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.

CVE-2026-93958CRITICALD-Link R95 DHMAPI ssi system os command injectionEPSS 2.7%CVE-2026-10873HIGHShibby Tomato Web UI rstats rstats_path os command injectionEPSS 2.7%CVE-2025-65008CRITICALOS Command Injection in WODESYS WD-R608U routerEPSS 2.7%CVE-2018-25083CRITICALThe pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name.EPSS 2.7%CVE-2023-26921CRITICALOS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.EPSS 2.7%CVE-2026-110636CRITICALpypdftk through 0.5 OS Command Injection via PDF and Output PathsEPSS 2.7%CVE-2022-24803CRITICALCommand Injection vulnerability in asciidoctor-include-extEPSS 2.7%CVE-2024-5181CRITICALCommand Injection in mudler/localaiEPSS 2.7%CVE-2024-4343CRITICALPython Command Injection in imartinez/privategptEPSS 2.7%CVE-2025-35027HIGHUnitree Multiple Robotic Products Command InjectionEPSS 2.7%CVE-2026-112351HIGHSunhillo SureLine OS Command Injection via networkDiag.cgiEPSS 2.7%CVE-2025-1546MEDIUMBDCOM Behavior Management and Auditing System operate.mds log_operate_clear os command injectionEPSS 2.7%CVE-2021-27102HIGHAccellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and lEPSS 2.7%KEVCVE-2026-55173HIGHAVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sinkEPSS 2.7%CVE-2021-33721—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elementEPSS 2.7%CVE-2026-58452HIGHJAIOTlink C492A-W6 4.8.30.57701411 OS Command Injection via SetMAC EndpointEPSS 2.7%CVE-2011-2195—A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoEPSS 2.7%CVE-2023-48782HIGHA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.EPSS 2.7%CVE-2025-56108HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 2.7%CVE-2020-2014HIGHPAN-OS: OS injection vulnerability in PAN-OS management serverEPSS 2.7%