Fallos del tipo CWE-77
2960 resultadosInjeção de comando via entrada não sanitizada
O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.
Ejemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.
Cómo mitigar
Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.
CVE-2020-14505—Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerabEPSS 7.0%CVE-2023-2647MEDIUMWeaver E-Office File Upload utility_all.php command injectionEPSS 7.0%CVE-2018-16462—A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution EPSS 7.0%CVE-2026-1324HIGHSangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injectionEPSS 7.0%CVE-2025-4453MEDIUMD-Link DIR-619L formSysCmd command injectionEPSS 7.0%CVE-2025-4454MEDIUMD-Link DIR-619L wake_on_lan command injectionEPSS 7.0%CVE-2026-8767LOWvercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injectionEPSS 7.0%CVE-2026-2944MEDIUMTosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injectionEPSS 6.9%CVE-2025-9575MEDIUMLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 upload.cgi cgiMain os command injectionEPSS 6.9%CVE-2025-15501CRITICALSangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injectionEPSS 6.9%CVE-2025-34267HIGHFlowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright PackagesEPSS 6.9%CVE-2025-4999MEDIUMLinksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub_4153FC command injectionEPSS 6.9%CVE-2025-5000MEDIUMLinksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control_panel_sw command injectionEPSS 6.9%CVE-2025-45985CRITICALBlink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450EPSS 6.9%CVE-2023-2374HIGHUbiquiti EdgeRouter X Web Management command injectionEPSS 6.9%CVE-2026-1192MEDIUMTosei Online Store Management System ネット店舗管理システム imode_alldata.php command injectionEPSS 6.9%CVE-2026-2227MEDIUMD-Link DCS-931L setSystemAdmin doSystem command injectionEPSS 6.8%CVE-2025-11665MEDIUMD-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injectionEPSS 6.8%CVE-2025-10964MEDIUMWavlink NU516U1 firewall.cgi sub_401B30 command injectionEPSS 6.8%CVE-2025-10963MEDIUMWavlink NU516U1 firewall.cgi sub_4016F0 command injectionEPSS 6.8%