Weaknesses of type CWE-77

2,807 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2025-47188MEDIUMA vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference UnEPSS 50.2%CVE-2023-33919HIGHA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).EPSS 47.7%CVE-2025-7083MEDIUMBelkin F9K1122 webs mp os command injectionEPSS 45.9%CVE-2025-32813HIGHAn issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.EPSS 43.9%CVE-2022-45701HIGHArris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.EPSS 42.6%CVE-2022-2234CRITICALmySCADA myPRO Command InjectionEPSS 42.3%CVE-2023-33538HIGHTP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the componentEPSS 41.9%KEVCVE-2020-23584CRITICALUnauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands witEPSS 41.4%CVE-2026-3854HIGHRemote code execution via git push option injection in GitHub Enterprise ServerEPSS 40.0%CVE-2026-3943MEDIUMH3C ACG1000-AK230 aaa_portal_auth_local_submit command injectionEPSS 39.5%CVE-2020-10826CRITICAL/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injectiEPSS 39.4%CVE-2024-7029HIGHCommand Injection in AVTech AVM1203 (IP Camera)EPSS 39.0%CVE-2023-33782HIGHD-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.EPSS 36.6%CVE-2023-22496HIGHNetdata vulnerable to command injection EPSS 36.2%CVE-2017-6327HIGHThe Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an indEPSS 35.9%KEVCVE-2021-1384MEDIUMCisco IOx for IOS XE Software Command Injection VulnerabilityEPSS 35.4%CVE-2010-5330CRITICALOn certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is notEPSS 33.8%KEVCVE-2016-10329—Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code vEPSS 33.5%CVE-2020-2509CRITICALCommand Injection Vulnerability in QTS and QuTS heroEPSS 33.4%KEVCVE-2025-5447MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injectionEPSS 33.2%