Weaknesses of type CWE-77

2,808 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2022-43109CRITICALD-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerabiliEPSS 3.7%CVE-2026-4554MEDIUMTenda F453 WriteFacMac FormWriteFacMac privilege escalationEPSS 3.7%CVE-2024-12350MEDIUMJFinalCMS Template TemplateController.java update command injectionEPSS 3.7%CVE-2025-11121MEDIUMTenda AC18 AdvSetLanip command injectionEPSS 3.7%CVE-2025-11523MEDIUMTenda AC7 AdvSetLanip command injectionEPSS 3.7%CVE-2025-9934MEDIUMTOTOLINK X5000R cstecgi.cgi sub_410C34 command injectionEPSS 3.7%CVE-2026-4204MEDIUMD-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injectionEPSS 3.7%CVE-2023-22659HIGHAn os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafEPSS 3.7%CVE-2023-30623HIGHArbitrary command injection in embano1/wip EPSS 3.7%CVE-2024-39782CRITICALMultiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciaEPSS 3.7%CVE-2020-10518—Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerEPSS 3.7%CVE-2025-7192MEDIUMD-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injectionEPSS 3.7%CVE-2025-60672MEDIUMAn unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in EPSS 3.6%CVE-2024-5194MEDIUMArris VAP2500 assoc_table.php command injectionEPSS 3.6%CVE-2023-23550HIGHAn OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafteEPSS 3.6%CVE-2023-24519HIGHTwo OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A speciEPSS 3.6%CVE-2023-24520HIGHTwo OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A speciEPSS 3.6%CVE-2023-22306HIGHAn OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially craftedEPSS 3.6%CVE-2024-22061HIGHA Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to exEPSS 3.6%CVE-2026-4206MEDIUMD-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injectionEPSS 3.6%