Weaknesses of type CWE-77

2,960 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2026-19348CRITICALShenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injectionEPSS 3.6%CVE-2024-22061HIGHA Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to exEPSS 3.6%CVE-2025-11490MEDIUMwonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injectionEPSS 3.5%CVE-2024-23627CRITICALMotorola MR2600 SaveStaticRouteIPv4Params Command Injection VulnerabilityEPSS 3.5%CVE-2024-23626CRITICALMotorola MR2600 SaveSysLogParams Command Injection VulnerabilityEPSS 3.5%CVE-2025-11098MEDIUMD-Link DIR-823X set_wifi_blacklists command injectionEPSS 3.5%CVE-2025-11095MEDIUMD-Link DIR-823X delete_offline_device command injectionEPSS 3.5%CVE-2020-3211HIGHCisco IOS XE Software Web UI Command Injection VulnerabilityEPSS 3.5%CVE-2025-60673MEDIUMAn unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in EPSS 3.5%CVE-2026-79741MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliEPSS 3.5%CVE-2025-11121MEDIUMTenda AC18 AdvSetLanip command injectionEPSS 3.5%CVE-2019-16005HIGHCisco Webex Video Mesh Node Command Injection VulnerabilityEPSS 3.5%CVE-2026-7692MEDIUMWavlink WL-WN570HA1 adm.cgi ping_ddns command injectionEPSS 3.5%CVE-2026-7691MEDIUMWavlink WL-WN570HA1 adm.cgi set_sys_cmd command injectionEPSS 3.5%CVE-2026-4591MEDIUMkalcaddle kodbox fileThumb Endpoint app.php checkBin os command injectionEPSS 3.5%CVE-2016-6558—The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to command injectionEPSS 3.5%CVE-2026-1326MEDIUMTotolink NR1800X POST Request cstecgi.cgi setWanCfg command injectionEPSS 3.5%CVE-2023-30400CRITICALAn issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration scriptEPSS 3.5%CVE-2026-8344MEDIUMD-Link DIR-816 formDMZ.cgi sub_445E7C command injectionEPSS 3.5%CVE-2026-8345MEDIUMD-Link DIR-816 singlePortForward sub_445E7C command injectionEPSS 3.5%