Fallos del tipo CWE-77
2810 resultadosInjeção de comando via entrada não sanitizada
O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.
Ejemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.
Cómo mitigar
Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.
CVE-2026-7066MEDIUMchoieastsea simple-openstack-mcp server.py exec_openstack os command injectionEPSS 2.1%CVE-2026-7215MEDIUMegtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injectionEPSS 2.1%CVE-2026-9452MEDIUMFoundDream miniclawd exec.ts ExecTool.execute os command injectionEPSS 2.1%CVE-2026-7058MEDIUM666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injectionEPSS 2.1%CVE-2026-5688MEDIUMTotolink A7100RU cstecgi.cgi setDdnsCfg os command injectionEPSS 2.1%CVE-2026-7316MEDIUMeiliyaabedini aider-mcp code_with_ai aider_mcp.py command injectionEPSS 2.1%CVE-2026-7593MEDIUMSunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injectionEPSS 2.1%CVE-2026-5678MEDIUMTotolink A7100RU cstecgi.cgi setScheduleCfg os command injectionEPSS 2.1%CVE-2026-7211MEDIUMdvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injectionEPSS 2.1%CVE-2017-20156MEDIUMExciting Printer Argument prepare_page.rb command injectionEPSS 2.1%CVE-2026-94138MEDIUMChengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injectionEPSS 2.1%CVE-2023-27135CRITICALTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setEPSS 2.0%CVE-2026-84059MEDIUMICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injectionEPSS 2.0%CVE-2026-11451MEDIUMGL.iNet GL-MT3000 FTP Protocol glc snprintf command injectionEPSS 2.0%CVE-2023-27229CRITICALTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanEPSS 2.0%CVE-2023-27231CRITICALTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWEPSS 2.0%CVE-2024-45682HIGHMillbeck Communications Proroute H685t-w Command Injection.EPSS 2.0%CVE-2025-67511CRITICALCybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent toolEPSS 2.0%CVE-2018-0344—A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticaEPSS 2.0%CVE-2023-29798CRITICALTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTraceroEPSS 2.0%