Fallos del tipo CWE-77
2809 resultadosInjeção de comando via entrada não sanitizada
O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.
Ejemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.
Cómo mitigar
Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.
CVE-2026-7240CRITICALTotolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injectionEPSS 2.4%CVE-2026-7244CRITICALTotolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injectionEPSS 2.4%CVE-2025-1676MEDIUMhzmanyun Education and Training System pdf2swf os command injectionEPSS 2.4%CVE-2025-69256HIGHserverless MCP Server vulnerable to command injection in list-projects toolEPSS 2.4%CVE-2018-5403—Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basicEPSS 2.4%CVE-2023-49437CRITICALTenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlLisEPSS 2.4%CVE-2023-27837CRITICALTP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the functiEPSS 2.4%CVE-2023-27836CRITICALTP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the EPSS 2.4%CVE-2019-15575—A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API throughEPSS 2.4%CVE-2024-29366HIGHA command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.EPSS 2.4%CVE-2026-5101MEDIUMTotolink A3300R Parameter cstecgi.cgi setLanCfg command injectionEPSS 2.4%CVE-2026-6576MEDIUMliangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injectionEPSS 2.4%CVE-2025-57200MEDIUMAVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability iEPSS 2.4%CVE-2026-5528MEDIUMMoussaabBadla code-screenshot-mcp HTTP os command injectionEPSS 2.4%CVE-2023-31530HIGHMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter.EPSS 2.4%CVE-2025-15379CRITICALCommand Injection in mlflow/mlflowEPSS 2.4%CVE-2026-2560MEDIUMkalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injectionEPSS 2.4%CVE-2026-94098CRITICALNetcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injectionEPSS 2.4%CVE-2026-12197HIGHRuijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injectionEPSS 2.4%CVE-2026-18900HIGHH3C NX15 Backend RPC esps file.exec os command injectionEPSS 2.4%