Weaknesses of type CWE-77

2,809 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2025-8937MEDIUMTOTOLINK N350R formSysCmd command injectionEPSS 2.1%CVE-2026-90617MEDIUMGH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injectionEPSS 2.1%CVE-2026-19263MEDIUMINQUIRELAB mcp-bridge-api Servers Endpoint mcp-bridge.js command injectionEPSS 2.1%CVE-2026-90618MEDIUMGH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injectionEPSS 2.1%CVE-2025-29516HIGHD-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup functioEPSS 2.1%CVE-2026-5041MEDIUMcode-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injectionEPSS 2.1%CVE-2026-85040MEDIUMZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injectionEPSS 2.1%CVE-2026-4537MEDIUMCudy TR1200 ipsec.lua action_ipsec_conn command injectionEPSS 2.1%CVE-2023-24331CRITICALCommand Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands viaEPSS 2.1%CVE-2024-28353HIGHThere is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands EPSS 2.1%CVE-2026-19041MEDIUMMissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injectionEPSS 2.1%CVE-2024-26204HIGHOutlook for Android Information Disclosure VulnerabilityEPSS 2.1%CVE-2026-76761MEDIUMchenhg5 cc-connect Management API engine.go shellExecCommand os command injectionEPSS 2.1%CVE-2026-1638MEDIUMTenda AC21 mDMZSetCfg command injectionEPSS 2.1%CVE-2026-7062MEDIUMIntina47 context-sync Git Integration git-integration.ts os command injectionEPSS 2.1%CVE-2026-7416MEDIUMPolarVista xcode-mcp-server MCP index.ts run_tests os command injectionEPSS 2.1%CVE-2023-24151CRITICALA command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to EPSS 2.1%CVE-2023-24152CRITICALA command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execEPSS 2.1%CVE-2026-79912MEDIUMTOTOLINK N600R cstecgi.cgi getCurrentTime command injectionEPSS 2.1%CVE-2026-7061MEDIUMToowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injectionEPSS 2.1%