# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-pro…](https://agentprime.io/advisories/CVE-2026-79538.md) `CVE-2026-79538` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection - [Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template syntax) can be used to a…](https://agentprime.io/advisories/CVE-2026-77177.md) `CVE-2026-77177` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection - [An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php](https://agentprime.io/advisories/CVE-2026-39117.md) `CVE-2026-39117` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection - [An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.](https://agentprime.io/advisories/CVE-2024-31026.md) `CVE-2024-31026` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection - [Unsafe use of eval() method in ros2 topic hz tool](https://agentprime.io/advisories/CVE-2024-42002.md) `CVE-2024-42002` · CVE record: Open Source Robotics Foundation Robot Operating System 2 (ROS 2) · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution](https://agentprime.io/advisories/GHSA-wjgm-6hv5-3cvf.md) `GHSA-wjgm-6hv5-3cvf`, `CVE-2026-19032` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.8.0, <2.18.10 || >=2.19.0, <2.21.6 || >=2.22.0, <2.22.2`, fixed in `2.18.10`, `2.21.6`, `2.22.2` · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection, CWE-610 - [Eleveo Call Recording Software Play Audio audio.jsp cross site scripting](https://agentprime.io/advisories/CVE-2026-101141.md) `CVE-2026-101141` · CVE record: Eleveo Call Recording Software · CVSS 5.1 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)](https://agentprime.io/advisories/CVE-2026-54710.md) `CVE-2026-54710` · CVE record: FreePBX security-reporting · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection, CWE-20 - [Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module](https://agentprime.io/advisories/CVE-2026-54708.md) `CVE-2026-54708` · CVE record: FreePBX security-reporting · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Path traversal, Code injection - [Streamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providers](https://agentprime.io/advisories/CVE-2026-96740.md) `CVE-2026-96740` · CVE record: Red Hat StreamsHub Console for Apache Kafka® and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [Langflow Code Execution via eval() in Component Input Schema](https://agentprime.io/advisories/CVE-2026-101861.md) `CVE-2026-101861` · CVE record: langflow-ai langflow · CVSS 2.1 Low · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [Unsloth Zoo Code Injection via model_type in config.json](https://agentprime.io/advisories/CVE-2026-93348.md) `CVE-2026-93348` · CVE record: unslothai unsloth-zoo and 1 more · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [Code Injection in Innotim Software's Logsign SIEM](https://agentprime.io/advisories/CVE-2026-90926.md) `CVE-2026-90926` · CVE record: Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM · CVSS 8.8 High · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization](https://agentprime.io/advisories/CVE-2026-101292.md) `CVE-2026-101292` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 2 more · CVSS 8.2 High · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation](https://agentprime.io/advisories/CVE-2026-84744.md) `CVE-2026-84744` · CVE record: Unknown WPForms · CVSS 6.5 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection - [amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting](https://agentprime.io/advisories/CVE-2026-100904.md) `CVE-2026-100904` · CVE record: amirsanni mini-inventory-and-sales-management-system · CVSS 5.1 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting](https://agentprime.io/advisories/CVE-2026-100882.md) `CVE-2026-100882` · CVE record: Krayin laravel-crm · CVSS 4.8 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [zhistaredu StarTraining application.yml cross site scripting](https://agentprime.io/advisories/CVE-2026-100881.md) `CVE-2026-100881` · CVE record: zhistaredu StarTraining · CVSS 2.1 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting](https://agentprime.io/advisories/CVE-2026-100880.md) `CVE-2026-100880` · CVE record: zhistaredu StarTraining · CVSS 5.1 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [mathurvishal CloudClassroom-PHP-Project registrationform.php cross site scripting](https://agentprime.io/advisories/CVE-2026-100877.md) `CVE-2026-100877` · CVE record: mathurvishal CloudClassroom-PHP-Project · CVSS 5.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer](https://agentprime.io/advisories/CVE-2026-100741.md) `CVE-2026-100741` · CVE record: Progressive Robot Ltd hMailServer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection - [Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields](https://agentprime.io/advisories/CVE-2026-81655.md) `CVE-2026-81655` · CVE record: Unknown Ad Inserter · CVSS 7.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection - [MONAI through 1.6.0 contains an eval injection vulnerability in \_get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and o...](https://agentprime.io/advisories/GHSA-h89g-r5pc-wxfm.md) `GHSA-h89g-r5pc-wxfm`, `CVE-2026-100842`, `PYSEC-2026-4017` · PyPI `monai`: affected `<1.6.1rc0`, fixed in `1.6.1rc0` · CVSS 7.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection - [MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves \_target\_ values to arbitrary importable callables without an allow list and passe...](https://agentprime.io/advisories/GHSA-873f-pvrv-4x83.md) `GHSA-873f-pvrv-4x83`, `CVE-2026-100840`, `PYSEC-2026-4015` · PyPI `monai`: affected `<1.6.1rc0`, fixed in `1.6.1rc0` · CVSS 8.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection - [Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape](https://agentprime.io/advisories/CVE-2026-100865.md) `CVE-2026-100865` · CVE record: heymrun heym · CVSS 8.7 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection - [heym before 0.0.91 Remote Code Execution via Expression Engine](https://agentprime.io/advisories/CVE-2026-100864.md) `CVE-2026-100864` · CVE record: heymrun heym · CVSS 8.7 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection - [Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29](https://agentprime.io/advisories/CVE-2026-97160.md) `CVE-2026-97160` · CVE record: lomart.fr UP plugin for Joomla · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: Code injection - [mathurvishal CloudClassroom-PHP-Project updatequery.php cross site scripting](https://agentprime.io/advisories/CVE-2026-100313.md) `CVE-2026-100313` · CVE record: mathurvishal CloudClassroom-PHP-Project · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [mathurvishal CloudClassroom-PHP-Project Faculty Video Management managevideos2.php cross site scripting](https://agentprime.io/advisories/CVE-2026-100311.md) `CVE-2026-100311` · CVE record: mathurvishal CloudClassroom-PHP-Project · CVSS 5.1 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Horilla: Authenticated RCE in Horilla List-View Export](https://agentprime.io/advisories/CVE-2026-96795.md) `CVE-2026-96795` · CVE record: horilla horilla-hr · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Code injection - [Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata](https://agentprime.io/advisories/CVE-2026-63432.md) `CVE-2026-63432` · CVE record: horilla horilla-hr · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Code injection, Information disclosure - [Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting](https://agentprime.io/advisories/CVE-2026-97897.md) `CVE-2026-97897` · CVE record: Krayin laravel-crm · CVSS 5.1 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting](https://agentprime.io/advisories/CVE-2026-97896.md) `CVE-2026-97896` · CVE record: krayin laravel-crm · CVSS 5.1 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Zammad: AI Agent template sanitizer bypass leads to remote code execution](https://agentprime.io/advisories/CVE-2026-84462.md) `CVE-2026-84462` · CVE record: zammad zammad · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2026 · Tags: Code injection, CWE-20 - [Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection](https://agentprime.io/advisories/CVE-2026-97871.md) `CVE-2026-97871` · CVE record: Zhonglun CloudPos · CVSS 6.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Other injection, Code injection - [sheshbabu zen Note Editor NotesEditor.jsx dangerouslySetInnerHTML cross site scripting](https://agentprime.io/advisories/CVE-2026-97868.md) `CVE-2026-97868` · CVE record: sheshbabu zen · CVSS 5.1 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names](https://agentprime.io/advisories/CVE-2026-100174.md) `CVE-2026-100174` · CVE record: ail project ail framework · CVSS 5.1 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return](https://agentprime.io/advisories/CVE-2026-19804.md) `CVE-2026-19804` · CVE record: clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Code injection - [ningzichun student-management-system addLog.php echo cross site scripting](https://agentprime.io/advisories/CVE-2026-97650.md) `CVE-2026-97650` · CVE record: ningzichun student-management-system · CVSS 5.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)](https://agentprime.io/advisories/GHSA-mr95-65j8-9mxp.md) `GHSA-mr95-65j8-9mxp`, `CVE-2026-57170`, `PYSEC-2026-4029` · PyPI `compliance-trestle`: affected `<3.12.4 || >=4.0.0, <4.1.0`, fixed in `3.12.4`, `4.1.0` · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Code injection - [YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting](https://agentprime.io/advisories/CVE-2026-97322.md) `CVE-2026-97322` · CVE record: YunaiV ruoyi-vue-pro and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [volotat Anagnorisis Media Filename PlaylistManager.js html cross site scripting](https://agentprime.io/advisories/CVE-2026-97233.md) `CVE-2026-97233` · CVE record: volotat Anagnorisis · CVSS 5.1 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Shell script injection via server-supplied database name in Open MongoDB shell](https://agentprime.io/advisories/CVE-2026-96750.md) `CVE-2026-96750` · CVE record: MongoDB Compass · CVSS 7.3 High · Not analysed yet · Published 24 Sept 2026 · Tags: Code injection - [DbGate JSON Runner runners.js code injection](https://agentprime.io/advisories/CVE-2026-97225.md) `CVE-2026-97225` · CVE record: DbGate · CVSS 5.3 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Other injection, Code injection - [Excalidraw Imported File restore.ts cross site scripting](https://agentprime.io/advisories/CVE-2026-97224.md) `CVE-2026-97224` · CVE record: Excalidraw · CVSS 5.3 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection](https://agentprime.io/advisories/CVE-2026-97359.md) `CVE-2026-97359` · CVE record: rejetto hfs2 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Code injection - [PaperCut NG/MF: Remote Code Execution via Scripting Subsystem](https://agentprime.io/advisories/CVE-2026-14780.md) `CVE-2026-14780` · CVE record: PaperCut PaperCut NG/MF · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026 · Tags: Code injection - [huanzi-qch base-admin Add User CommonController.java save cross site scripting](https://agentprime.io/advisories/CVE-2026-96810.md) `CVE-2026-96810` · CVE record: huanzi-qch base-admin · CVSS 5.1 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions](https://agentprime.io/advisories/CVE-2026-51997.md) `CVE-2026-51997` · CVE record · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Code injection, Server-side request forgery (SSRF), CWE-20 - [SEMCMS KindEditor Upload upload_json.php cross site scripting](https://agentprime.io/advisories/CVE-2026-96739.md) `CVE-2026-96739` · CVE record: SEMCMS · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator\_\* settings leads to remote code execution in the control-plane rsyslo…](https://agentprime.io/advisories/CVE-2026-85475.md) `CVE-2026-85475` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.7 and 1 more · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)](https://agentprime.io/advisories/GHSA-jjq7-m736-w977.md) `GHSA-jjq7-m736-w977`, `CVE-2026-77602` · RubyGems `openc3`: affected `>=5.1.0, <7.3.0`, fixed in `7.3.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [orval before 8.29.0 Code Injection via operationId](https://agentprime.io/advisories/CVE-2026-96759.md) `CVE-2026-96759` · CVE record: orval-labs orval · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [orval @orval/core before 8.28.0 Code Injection via Form-Data](https://agentprime.io/advisories/CVE-2026-96758.md) `CVE-2026-96758` · CVE record: orval-labs orval · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [orval before 8.29.0 Code Injection via unescaped OpenAPI media-type](https://agentprime.io/advisories/CVE-2026-96757.md) `CVE-2026-96757` · CVE record: orval-labs orval · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [orval before 8.30.0 Code Injection via Factory Generation](https://agentprime.io/advisories/CVE-2026-96756.md) `CVE-2026-96756` · CVE record: orval-labs orval · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [orval @orval/effect 8.14.0 through 8.28.1 Code Injection](https://agentprime.io/advisories/CVE-2026-96755.md) `CVE-2026-96755` · CVE record: orval-labs orval · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path](https://agentprime.io/advisories/CVE-2026-96754.md) `CVE-2026-96754` · CVE record: orval-labs orval · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [Frappe ERPNext before 16.34.1 Unauthorized Method Invocation](https://agentprime.io/advisories/CVE-2026-96672.md) `CVE-2026-96672` · CVE record: Frappe ERPNext · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [Solspace Freeform: Limited Twig template injection via submitted field values](https://agentprime.io/advisories/GHSA-gxrg-x694-283w.md) `GHSA-gxrg-x694-283w`, `CVE-2026-73858`, `PKSA-x44x-t9qv-gv3x` · Packagist `solspace/craft-freeform`: affected `>=5.0.0, <5.10.14`, fixed in `5.10.14` · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .