Falhas do tipo CWE-77

2.810 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2024-32026CRITICALKohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)EPSS 3.0%CVE-2023-24582HIGHTwo OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially cEPSS 3.0%CVE-2025-9935MEDIUMTOTOLINK N600R cstecgi.cgi sub_4159F8 command injectionEPSS 3.0%CVE-2026-27811HIGHRoxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCEEPSS 3.0%CVE-2018-0350—A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbiEPSS 3.0%CVE-2023-24583HIGHTwo OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially cEPSS 3.0%CVE-2024-7160MEDIUMTOTOLINK A3700R cstecgi.cgi setWanCfg command injectionEPSS 3.0%CVE-2022-44621CRITICALApache Kylin: Command injection by Diagnosis ControllerEPSS 3.0%CVE-2026-1625MEDIUMD-Link DWR-M961 SMS Message formSmsManage sub_4250E0 command injectionEPSS 3.0%CVE-2026-1624MEDIUMD-Link DWR-M961 formLtefotaUpgradeFibocom command injectionEPSS 3.0%CVE-2026-2169MEDIUMD-Link DWR-M921 formLtefotaUpgradeFibocom command injectionEPSS 3.0%CVE-2026-5176MEDIUMTotolink A3300R cstecgi.cgi setSyslogCfg command injectionEPSS 3.0%CVE-2025-24150HIGHA privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 1EPSS 3.0%CVE-2025-53773HIGHGitHub Copilot and Visual Studio Remote Code Execution VulnerabilityEPSS 3.0%CVE-2026-39866HIGHLawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.ymlEPSS 3.0%CVE-2026-7693HIGHBackup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' ParameterEPSS 3.0%CVE-2026-1689MEDIUMTenda HG10 Login formLogin checkUserFromLanOrWan command injectionEPSS 3.0%CVE-2026-86148CRITICALTenda CP3 Kylin system.c SystemAsh os command injectionEPSS 2.9%CVE-2026-86149CRITICALTenda CP3 NetCheckPing.cpp os command injectionEPSS 2.9%CVE-2026-86151CRITICALTenda CP3 Network Configuration Management system.c sub_2F77E8 os command injectionEPSS 2.9%