Weaknesses of type CWE-77

2,809 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2024-50388CRITICALHBS 3 Hybrid Backup SyncEPSS 2.3%CVE-2021-27447CRITICALMesa Labs AmegaView command injectionEPSS 2.3%CVE-2026-86295MEDIUMD-Link DIR-895L udhcpcd serverpacket.c sendACK command injectionEPSS 2.3%CVE-2023-26866CRITICALGreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerabEPSS 2.3%CVE-2026-79945MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliEPSS 2.3%CVE-2019-6579—A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port EPSS 2.3%CVE-2025-52284MEDIUMTotolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parametEPSS 2.3%CVE-2025-59831HIGH`git-comiters` Command Injection vulnerabilityEPSS 2.3%CVE-2024-51442HIGHCommand Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlnaEPSS 2.3%CVE-2026-75002HIGHIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information dEPSS 2.3%CVE-2025-5030LOWAckites KillWxapkg wxapkg File Parser unpack.go processFile os command injectionEPSS 2.3%CVE-2026-1623MEDIUMTotolink A7000R cstecgi.cgi setUpgradeFW command injectionEPSS 2.3%CVE-2021-32529CRITICALQSAN XEVO, SANOS - Command Injection -1EPSS 2.3%CVE-2026-18980MEDIUMnearai ironclaw shell.rs classify_command_risk command injectionEPSS 2.3%CVE-2026-19243MEDIUMHKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injectionEPSS 2.3%CVE-2021-1443MEDIUMCisco IOS XE Software Web UI OS Command Injection VulnerabilityEPSS 2.3%CVE-2025-29296CRITICALH3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic REPSS 2.3%CVE-2024-7896MEDIUMTosei Online Store Management System ネット店舗管理システム p1_ftpserver.php command injectionEPSS 2.3%CVE-2024-41320HIGHTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_EPSS 2.2%CVE-2023-36414HIGHAzure Identity SDK Remote Code Execution VulnerabilityEPSS 2.2%