Weaknesses of type CWE-77

2,810 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2026-7718MEDIUMTotolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injectionEPSS 1.8%CVE-2026-9515MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injectionEPSS 1.8%CVE-2026-77945MEDIUMTRENDnet TEW-821DAP ssi upload.cgi command injectionEPSS 1.8%CVE-2026-9534MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injectionEPSS 1.8%CVE-2026-9533MEDIUMTotolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injectionEPSS 1.8%CVE-2026-6108MEDIUM1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injectionEPSS 1.8%CVE-2026-15485MEDIUMTRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injectionEPSS 1.8%CVE-2026-15487MEDIUMTRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injectionEPSS 1.8%CVE-2026-9565MEDIUMhaojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injectionEPSS 1.8%CVE-2026-7653MEDIUMr-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injectionEPSS 1.8%CVE-2026-15546MEDIUMShibby Tomato start_jffs2 sub_2D568 os command injectionEPSS 1.8%CVE-2026-9531MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injectionEPSS 1.8%CVE-2026-15486MEDIUMTRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injectionEPSS 1.8%CVE-2026-38704CRITICALA command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IEPSS 1.8%CVE-2026-38702CRITICALA command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IREPSS 1.8%CVE-2026-38707CRITICALA command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315EPSS 1.8%CVE-2026-38703CRITICALA command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IREPSS 1.8%CVE-2026-36841CRITICALTOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDeviceEPSS 1.8%CVE-2023-36805HIGHWindows MSHTML Platform Security Feature Bypass VulnerabilityEPSS 1.8%CVE-2024-30637HIGHTenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.EPSS 1.8%