Weaknesses of type CWE-77

2,960 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2022-26007CRITICALAn OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-craftedEPSS 5.4%CVE-2021-43113CRITICALiTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (EPSS 5.4%CVE-2024-8211MEDIUMD-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injectionEPSS 5.4%CVE-2026-4206MEDIUMD-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injectionEPSS 5.4%CVE-2025-5621MEDIUMD-Link DIR-816 qosClassifier os command injectionEPSS 5.4%CVE-2024-39765CRITICALMultiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505EPSS 5.4%CVE-2026-5354MEDIUMTrendnet TEW-657BRM setup.cgi vpn_connect os command injectionEPSS 5.3%CVE-2026-5353MEDIUMTrendnet TEW-657BRM setup.cgi ping_test os command injectionEPSS 5.3%CVE-2026-5355MEDIUMTrendnet TEW-657BRM setup.cgi vpn_drop os command injectionEPSS 5.3%CVE-2025-52046CRITICALTotolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and deEPSS 5.3%CVE-2026-3485CRITICALD-Link DIR-868L SSDP Service sub_1BF84 os command injectionEPSS 5.3%CVE-2026-2151HIGHD-Link DIR-615 DMZ Host Feature adv_firewall.php os command injectionEPSS 5.3%CVE-2026-2063MEDIUMD-Link DIR-823X Web Management set_ac_server os command injectionEPSS 5.3%CVE-2025-4340MEDIUMD-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injectionEPSS 5.3%CVE-2025-1946MEDIUMhzmanyun Education and Training System exportPDF command injectionEPSS 5.2%CVE-2025-1947MEDIUMhzmanyun Education and Training System UploadImageController.java scorm command injectionEPSS 5.2%CVE-2025-10814MEDIUMD-Link DIR-823X goahead command injectionEPSS 5.2%CVE-2024-12358MEDIUMWeiYe-Jing datax-web add os command injectionEPSS 5.2%CVE-2024-8214MEDIUMD-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injectionEPSS 5.2%CVE-2025-10358MEDIUMWavlink WL-WN578W2 wireless.cgi sub_404850 os command injectionEPSS 5.2%