Falhas do tipo CWE-77

2.807 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2025-9745MEDIUMD-Link DI-500WF jhttpd version_upgrade.asp os command injectionEPSS 10.2%CVE-2026-2846HIGHUTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injectionEPSS 10.2%CVE-2025-1608MEDIUMLB-LINK AC1900 Router set_manpwd websGetVar os command injectionEPSS 10.2%CVE-2025-1609MEDIUMLB-LINK AC1900 Router set_cmd websGetVar os command injectionEPSS 10.2%CVE-2025-10327MEDIUMMiczFlor RPi-Jukebox-RFID shuffle.php os command injectionEPSS 10.2%CVE-2020-27864HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware versionEPSS 10.1%CVE-2014-5470CRITICALActual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input dataEPSS 10.0%CVE-2025-3987MEDIUMTOTOLINK N150RT formWsc command injectionEPSS 9.9%CVE-2025-69542CRITICALA Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in thEPSS 9.9%CVE-2025-44176MEDIUMTenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.EPSS 9.9%CVE-2025-28145MEDIUMEdimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition EPSS 9.8%CVE-2025-28142MEDIUMEdimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the folderEPSS 9.8%CVE-2025-54073HIGHmcp-package-docs vulnerable to command injection in several toolsEPSS 9.8%CVE-2026-2080HIGHUTT HiPER 810 formUser setSysAdm command injectionEPSS 9.7%CVE-2023-2649HIGHTenda AC23 Service Port 7329 ate command injectionEPSS 9.7%CVE-2024-35520HIGHNetgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter.EPSS 9.6%CVE-2026-0581MEDIUMTenda AC1206 httpd BehaviorManager formBehaviorManager command injectionEPSS 9.5%CVE-2025-28143MEDIUMEdimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the groupnEPSS 9.5%CVE-2026-5184MEDIUMTRENDnet TEW-713RE setSysAdm command injectionEPSS 9.5%CVE-2025-53832HIGH@translated/lara-mcp vulnerable to command injection in import_tmx toolEPSS 9.5%