Fallos del tipo CWE-77
2960 resultadosInjeção de comando via entrada não sanitizada
O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.
Ejemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.
Cómo mitigar
Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.
CVE-2024-37642CRITICALTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability via the ipv4_ping, ipv6_ping parameter at /foEPSS 11.4%CVE-2025-15137HIGHTRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injectionEPSS 11.4%CVE-2025-54073HIGHmcp-package-docs vulnerable to command injection in several toolsEPSS 11.3%CVE-2025-3987MEDIUMTOTOLINK N150RT formWsc command injectionEPSS 11.3%CVE-2020-8298—fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, anEPSS 11.2%CVE-2026-2846HIGHUTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injectionEPSS 11.0%CVE-2024-48288HIGHTP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontenEPSS 10.9%CVE-2025-47959HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 10.9%CVE-2025-50989CRITICALOPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edEPSS 10.9%CVE-2025-53832HIGH@translated/lara-mcp vulnerable to command injection in import_tmx toolEPSS 10.9%CVE-2025-66399HIGHSNMP Command Injection leads to RCE in CactiEPSS 10.8%CVE-2025-45988CRITICALBlink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450EPSS 10.8%CVE-2025-14884HIGHD-Link DIR-605 Firmware Update Service command injectionEPSS 10.8%CVE-2025-15136HIGHTRENDnet TEW-800MB Management wizardset do_setWizard_asp command injectionEPSS 10.7%CVE-2026-2080HIGHUTT HiPER 810 formUser setSysAdm command injectionEPSS 10.7%CVE-2025-44176MEDIUMTenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.EPSS 10.7%CVE-2026-4840HIGHNetcore Power 15AX Diagnostic Tool netis.cgi setTools os command injectionEPSS 10.7%CVE-2022-40765MEDIUMA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker witEPSS 10.6%KEVCVE-2026-2184MEDIUMGreat Developers Certificate Generation System csv.php os command injectionEPSS 10.5%CVE-2026-2085HIGHD-Link DWR-M921 USSD Configuration Endpoint formUSSDSetup sub_419F20 command injectionEPSS 10.5%