OS command injection - Port Swigger
Summary: OS command injection is a vulnerability that lets an attacker execute arbitrary operating system commands on the server running an application, and it often occurs due to inadequate input validation. PortSwigger states that OS command injection can fully compromise the application and its data, and that Burp can be used to test for these vulnerabilities.
Key Takeaway: A single input-validation gap here hands an attacker the server's own operating system, and with it the application and its data in full.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026