Falhas do tipo CWE-78
4.603 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2026-2167MEDIUMTotolink WA300 cstecgi.cgi setAPNetwork os command injectionEPSS 2.4%CVE-2025-1370MEDIUMMicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injectionEPSS 2.4%CVE-2023-3975HIGHOS Command Injection in jgraph/drawioEPSS 2.3%CVE-2023-38208CRITICALValidate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 2.3%CVE-2020-5322CRITICALDell EMC OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated mEPSS 2.3%CVE-2023-38673CRITICALCommand injection in fs.pyEPSS 2.3%CVE-2020-11016CRITICALRemote code execution in Message sending functionality in IntelMQ ManagerEPSS 2.3%CVE-2026-22265HIGHRoxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCEEPSS 2.3%CVE-2020-36762MEDIUMONS Digital RAS Collection Instrument comment.yml jobs os command injectionEPSS 2.3%CVE-2026-65638CRITICALImproper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commaEPSS 2.3%CVE-2021-21386CRITICALImproper Neutralization of Argument Delimiters in a Decompiling Package ProcessEPSS 2.3%CVE-2024-52320CRITICALPlanet Technology Planet WGS-804HPT Command InjectionEPSS 2.3%CVE-2026-90705MEDIUMD-Link DWR-M921 Boa Dispatch Table formsysCmd os command injectionEPSS 2.3%CVE-2025-63911HIGHCohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.EPSS 2.3%CVE-2026-90706MEDIUMD-Link DWR-M921 formWsc os command injectionEPSS 2.3%CVE-2026-67261CRITICALDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in EPSS 2.3%CVE-2026-5059CRITICALaws-mcp-server AWS CLI Command Injection Remote Code Execution VulnerabilityEPSS 2.3%CVE-2026-5058CRITICALaws-mcp-server Command Injection Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-32766CRITICALQTS, QuTS hero, QuTScloudEPSS 2.3%CVE-2026-75486HIGHSynk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch NameEPSS 2.3%