Fallos del tipo CWE-77
2946 resultadosInjeção de comando via entrada não sanitizada
O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.
Ejemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.
Cómo mitigar
Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.
CVE-2025-14706CRITICALShiguangwu sgwbox N3 NETREBOOT http_eshell_server command injectionEPSS 18.6%CVE-2023-49237CRITICALAn issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davEPSS 18.6%CVE-2026-22719HIGHVMware Aria Operations command injection vulnerabilityEPSS 18.3%KEVCVE-2025-60689MEDIUMAn unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (FirmwarEPSS 18.3%CVE-2024-10429HIGHWAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injectionEPSS 18.2%CVE-2024-46048HIGHTenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function iEPSS 18.0%CVE-2010-4345HIGHExim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confiEPSS 18.0%KEVCVE-2025-3983MEDIUMAMTT Hotel Broadband Operation System nlog_down.php command injectionEPSS 17.9%CVE-2024-39760CRITICALMultiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A spEPSS 17.8%CVE-2024-13129HIGHRoxy-WI roxy.py action_service os command injectionEPSS 17.7%CVE-2023-43477MEDIUMPost-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)EPSS 17.7%CVE-2024-34218LOWTOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost functioEPSS 17.6%CVE-2025-11331MEDIUMIdeaCMS Website Name Config.php command injectionEPSS 17.5%CVE-2026-2131MEDIUMXixianLiang HarmonyOS-mcp-server input_text os command injectionEPSS 17.5%CVE-2024-55547CRITICALRemote Command Execution via SNMPEPSS 17.4%CVE-2026-1419MEDIUMD-Link DCS700l Web Form setDayNightMode command injectionEPSS 17.2%CVE-2026-2824MEDIUMComfast CF-E7 webmggnt mbox-config sub_441CF4 command injectionEPSS 17.1%CVE-2025-6898MEDIUMD-Link DI-7300G+ in proxy_client.asp os command injectionEPSS 17.1%CVE-2025-7082MEDIUMBelkin F9K1122 webs formBSSetSitesurvey os command injectionEPSS 17.1%CVE-2025-57201HIGHAVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability iEPSS 17.1%