Falhas do tipo CWE-78
4.602 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2026-71914CRITICALDrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apmEPSS 2.6%CVE-2024-43804HIGHOS Command Injection via Port Scan Functionality in Roxy-WIEPSS 2.6%CVE-2022-25923HIGHVersions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper uEPSS 2.6%CVE-2026-27728CRITICALOneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()EPSS 2.5%CVE-2022-40785HIGHUnsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This allows an attacker to gEPSS 2.5%CVE-2026-9151HIGHCommand Injection Vulnerability in OpenVPN on Multiple TP-Link Archer RoutersEPSS 2.5%CVE-2026-34038CRITICALCoolify authenticated remote command injection leading to RCE and secret exfiltrationEPSS 2.5%CVE-2026-14863HIGHFileRun 2026.2.0 RCE via Thumbnail Generation Command InjectionEPSS 2.5%CVE-2026-45748CRITICALTermix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command InjectionEPSS 2.5%CVE-2025-6104HIGHWifi-soft UniBox Controller pms_check.php os command injectionEPSS 2.5%CVE-2024-41992HIGHWi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library functEPSS 2.5%CVE-2020-2030HIGHPAN-OS: OS command injection vulnerability in the management interfaceEPSS 2.5%CVE-2026-56700CRITICALGrav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command InjectionEPSS 2.5%CVE-2024-11482CRITICALA vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through commaEPSS 2.5%CVE-2023-24762CRITICALOS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAEPSS 2.5%CVE-2025-26613CRITICALOS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIAEPSS 2.5%CVE-2022-30303HIGHAn improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0 through 7.0.1, 6.3.EPSS 2.5%CVE-2022-0841LOWOS Command Injection in ljharb/npm-lockfileEPSS 2.5%CVE-2026-61517HIGHNetis NX10 OS Command Injection via Ping Diagnostic HandlerEPSS 2.5%CVE-2026-9044HIGHCommand Injection Vulnerability in OpenVPN of TP-Link Archer AXE75EPSS 2.5%