Falhas do tipo CWE-77

2.816 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2023-26866CRITICALGreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerabEPSS 2.3%CVE-2026-79945MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliEPSS 2.3%CVE-2019-6579—A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port EPSS 2.3%CVE-2025-52284MEDIUMTotolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parametEPSS 2.3%CVE-2025-59831HIGH`git-comiters` Command Injection vulnerabilityEPSS 2.3%CVE-2026-75002HIGHIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information dEPSS 2.3%CVE-2024-51442HIGHCommand Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlnaEPSS 2.3%CVE-2025-5030LOWAckites KillWxapkg wxapkg File Parser unpack.go processFile os command injectionEPSS 2.3%CVE-2026-93742CRITICALTotolink A3002MU formWsc command injectionEPSS 2.3%CVE-2021-32529CRITICALQSAN XEVO, SANOS - Command Injection -1EPSS 2.3%CVE-2026-18980MEDIUMnearai ironclaw shell.rs classify_command_risk command injectionEPSS 2.3%CVE-2026-19243MEDIUMHKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injectionEPSS 2.3%CVE-2021-1443MEDIUMCisco IOS XE Software Web UI OS Command Injection VulnerabilityEPSS 2.3%CVE-2025-29296CRITICALH3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic REPSS 2.3%CVE-2024-7896MEDIUMTosei Online Store Management System ネット店舗管理システム p1_ftpserver.php command injectionEPSS 2.3%CVE-2024-41320HIGHTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_EPSS 2.2%CVE-2023-36414HIGHAzure Identity SDK Remote Code Execution VulnerabilityEPSS 2.2%CVE-2026-1638MEDIUMTenda AC21 mDMZSetCfg command injectionEPSS 2.2%CVE-2025-22941CRITICALA command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and EPSS 2.2%CVE-2025-54100HIGHPowerShell Remote Code Execution VulnerabilityEPSS 2.2%