Weaknesses of type CWE-77

2,808 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2020-3219HIGHCisco IOS XE Software Web UI Command Injection VulnerabilityEPSS 3.3%CVE-2024-21488HIGHVersions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function witEPSS 3.3%CVE-2025-49834HIGHGHSL-2025-046: GPT-SoVITS Command Injection vulnerabilityEPSS 3.3%CVE-2025-49836HIGHGHSL-2025-048: GPT-SoVITS Command Injection vulnerabilityEPSS 3.3%CVE-2026-5153MEDIUMTenda CH22 WriteFacMac FormWriteFacMac command injectionEPSS 3.3%CVE-2026-1548MEDIUMTotolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injectionEPSS 3.3%CVE-2025-57296MEDIUMTenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to thEPSS 3.3%CVE-2024-35242HIGHComposer vulnerable to command injection via malicious git/hg branch namesEPSS 3.3%CVE-2023-1458HIGHA vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknEPSS 3.3%CVE-2025-1369LOWMicroWord eScan Antivirus USB Password os command injectionEPSS 3.3%CVE-2026-7119HIGHTenda HG3 formCountrystr os command injectionEPSS 3.3%CVE-2026-7160HIGHTenda HG3 formTracert command injectionEPSS 3.3%CVE-2019-6552—Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of usEPSS 3.3%CVE-2025-3729MEDIUMSourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injectionEPSS 3.3%CVE-2016-8628HIGHAnsible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to creEPSS 3.3%CVE-2024-5035HIGHTP-Link Archer C5400X - RFTest Unauthenticated Command InjectionEPSS 3.2%CVE-2024-10966MEDIUMTOTOLINK X18 cstecgi.cgi os command injectionEPSS 3.2%CVE-2025-8259MEDIUMVaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injectionEPSS 3.2%CVE-2022-46421CRITICALApache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_paramsEPSS 3.2%CVE-2022-45796CRITICALSHARP Multifunction Printer - Command InjectionEPSS 3.2%