Fallos del tipo CWE-77
2807 resultadosInjeção de comando via entrada não sanitizada
O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.
Ejemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.
Cómo mitigar
Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.
CVE-2026-5852CRITICALTotolink A7100RU CGI cstecgi.cgi setIptvCfg os command injectionEPSS 13.5%CVE-2026-6483HIGHWavlink WL-WN530H4 internet.cgi snprintf os command injectionEPSS 13.4%CVE-2026-5851CRITICALTotolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injectionEPSS 13.4%CVE-2025-15139MEDIUMTRENDnet TEW-822DRE formWsc sub_43ACF4 command injectionEPSS 13.3%CVE-2025-1610MEDIUMLB-LINK AC1900 Router set_blacklist websGetVar os command injectionEPSS 13.2%CVE-2026-9440MEDIUMEdimax BR-6478AC POST Request formAccept command injectionEPSS 13.0%CVE-2025-2094MEDIUMTOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injectionEPSS 13.0%CVE-2025-5504MEDIUMTOTOLINK X2000R formWsc command injectionEPSS 12.9%CVE-2022-26085CRITICALAn OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafteEPSS 12.8%CVE-2024-54794CRITICALThe script input feature of SpagoBI 3.5.1 allows arbitrary code execution.EPSS 12.8%CVE-2024-48286HIGHLinksys E3000 1.0.06.002_US is vulnerable to command injection via the diag_ping_start function.EPSS 12.8%CVE-2026-2670HIGHAdvantech WISE-6610-NB Background Management openvpn_apply os command injectionEPSS 12.8%CVE-2026-3612HIGHWavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injectionEPSS 12.7%CVE-2025-7414MEDIUMTenda O3V2 httpd setPingInfo fromNetToolGet os command injectionEPSS 12.6%CVE-2025-52377MEDIUMCommand injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to exeEPSS 12.6%CVE-2024-44335HIGHD-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v2EPSS 12.4%CVE-2025-15048MEDIUMTenda WH450 HTTP Request CheckTools command injectionEPSS 12.3%CVE-2018-3786—A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command lineEPSS 12.3%CVE-2026-4228MEDIUMLB-LINK BL-WR9000 set_wifi sub_458754 command injectionEPSS 12.2%CVE-2025-14107HIGHZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injectionEPSS 12.2%