Weaknesses of type CWE-77

2,810 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2026-73766HIGHAuthenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CXEPSS 1.5%CVE-2026-44879HIGHAuthenticated Command Injection allows arbitrary command execution in CLI InterfaceEPSS 1.5%CVE-2026-76675CRITICALAuthenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN GatewaysEPSS 1.5%CVE-2026-44865HIGHAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10EPSS 1.5%CVE-2026-31170CRITICALAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-paEPSS 1.4%CVE-2026-31175CRITICALAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnaEPSS 1.4%CVE-2026-3854HIGHRemote code execution via git push option injection in GitHub Enterprise ServerEPSS 1.4%CVE-2025-37176MEDIUMAuthenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflowEPSS 1.4%CVE-2024-21878HIGHCommand Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.xEPSS 1.4%CVE-2026-93533MEDIUMspatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injectionEPSS 1.4%CVE-2025-55294CRITICALCommand Injection via `format` option in screenshot-desktopEPSS 1.4%CVE-2023-36103HIGHCommand Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands EPSS 1.4%CVE-2023-40146MEDIUMA privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted coEPSS 1.4%CVE-2023-31996HIGHHanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storagEPSS 1.4%CVE-2025-60671MEDIUMA command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconEPSS 1.4%CVE-2023-34230HIGHSnowflake Connector vulnerable to Command InjectionEPSS 1.4%CVE-2025-57633CRITICALA command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commanEPSS 1.4%CVE-2020-27862HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A roEPSS 1.4%CVE-2026-24905MEDIUMInspektor Gadget has a Command Injection vulnerability in Makefile.buildEPSS 1.4%CVE-2025-2367MEDIUMOiwtech OIW-2431APGN-HP Personal Script Submenu formScript os command injectionEPSS 1.4%