Weaknesses of type CWE-77

2,960 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2024-39759CRITICALMultiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A spEPSS 8.4%CVE-2026-2952MEDIUMVaelsys HTTP POST Request tree_server.php os command injectionEPSS 8.4%CVE-2025-2725HIGHH3C Magic BE18000 HTTP POST Request auth command injectionEPSS 8.3%CVE-2025-13306MEDIUMD-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injectionEPSS 8.3%CVE-2024-8131MEDIUMD-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injectionEPSS 8.2%CVE-2023-31986CRITICALA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setEPSS 8.2%CVE-2024-2982MEDIUMTenda FH1202 WriteFacMac formWriteFacMac command injectionEPSS 8.2%CVE-2024-38227HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 8.2%CVE-2026-6992HIGHLinksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injectionEPSS 8.1%CVE-2023-31985CRITICALA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the forEPSS 8.1%CVE-2026-8229MEDIUMWavlink NU516U1 wireless.cgi WifiBasic os command injectionEPSS 8.1%CVE-2026-8230MEDIUMWavlink NU516U1 login.cgi sys_login1 os command injectionEPSS 8.1%CVE-2026-8227MEDIUMWavlink NU516U1 adm.cgi wzdapMesh os command injectionEPSS 8.1%CVE-2024-8128MEDIUMD-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injectionEPSS 8.0%CVE-2025-5695MEDIUMTeledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injectionEPSS 8.0%CVE-2024-8134MEDIUMD-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injectionEPSS 7.9%CVE-2024-8130MEDIUMD-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injectionEPSS 7.9%CVE-2024-8133MEDIUMD-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injectionEPSS 7.9%CVE-2026-52806CRITICALGogs: RCE via git rebase --exec argument injection in pull request mergeEPSS 7.9%CVE-2024-3009MEDIUMTenda FH1205 WriteFacMac formWriteFacMac command injectionEPSS 7.9%