Falhas do tipo CWE-77

2.814 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2026-5528MEDIUMMoussaabBadla code-screenshot-mcp HTTP os command injectionEPSS 2.4%CVE-2026-7682MEDIUMEdimax BR-6208AC L2TP Mode setWAN command injectionEPSS 2.4%CVE-2026-7705MEDIUMJD Cloud JDCOS Service jdcap set_iptv_info command injectionEPSS 2.4%CVE-2026-8753MEDIUMkalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injectionEPSS 2.4%CVE-2026-6576MEDIUMliangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injectionEPSS 2.4%CVE-2026-9297MEDIUMEdimax BR-6428NS POST Request formWlbasic command injectionEPSS 2.4%CVE-2023-31740HIGHThere is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management priEPSS 2.4%CVE-2023-31741HIGHThere is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management priEPSS 2.4%CVE-2025-7154MEDIUMTOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injectionEPSS 2.4%CVE-2024-1355CRITICALCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleEPSS 2.4%CVE-2026-32241HIGHFlannel vulnerable to cross-node remote code execution via extension backend BackendData injectionEPSS 2.4%CVE-2021-37708HIGHCommand injection in mail agent settingsEPSS 2.4%CVE-2025-15379CRITICALCommand Injection in mlflow/mlflowEPSS 2.4%CVE-2026-94095CRITICALNetcore NBR200V2 Traceroute Diagnostic Feature network_tools command injectionEPSS 2.4%CVE-2025-1370MEDIUMMicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injectionEPSS 2.4%CVE-2024-21880HIGHURL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.xEPSS 2.4%CVE-2026-81048CRITICALDell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command InjectionEPSS 2.4%CVE-2023-6848HIGHkalcaddle kodbox index.class.php check command injectionEPSS 2.3%CVE-2022-45600HIGHAztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authenticEPSS 2.3%CVE-2021-38542—Apache James vulnerable to STARTTLS command injection (IMAP and POP3)EPSS 2.3%