# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-116852.md) `CVE-2026-116852` · CVE record: Marketing Fire Widget Options · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter](https://agentprime.io/advisories/CVE-2026-102905.md) `CVE-2026-102905` · CVE record: spacetime Ad Inserter – Ad Manager & AdSense Ads · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameter](https://agentprime.io/advisories/CVE-2026-118635.md) `CVE-2026-118635` · CVE record: paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings Directory · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments](https://agentprime.io/advisories/CVE-2026-119716.md) `CVE-2026-119716` · CVE record: wbond pybars3 and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter](https://agentprime.io/advisories/CVE-2026-119714.md) `CVE-2026-119714` · CVE record: joedolson My Calendar - Accessible Event Manager · CVSS 6.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [Chamilo LMS: Conditional PHP execution through vendored QuickForm eval](https://agentprime.io/advisories/CVE-2026-44344.md) `CVE-2026-44344` · CVE record: chamilo chamilo-lms · CVSS 6.6 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()](https://agentprime.io/advisories/CVE-2026-119578.md) `CVE-2026-119578` · CVE record: Project-MONAI MONAI · CVSS 8.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200](https://agentprime.io/advisories/CVE-2026-107259.md) `CVE-2026-107259` · CVE record: Drupal Linked Field · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203](https://agentprime.io/advisories/CVE-2026-107264.md) `CVE-2026-107264` · CVE record: Drupal Inline Formatter Field · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218](https://agentprime.io/advisories/CVE-2026-108099.md) `CVE-2026-108099` · CVE record: Drupal Entity List · No CVSS score · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection - [Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt](https://agentprime.io/advisories/CVE-2026-115943.md) `CVE-2026-115943` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [SOCFortress CoPilot: Stored case-report template injection permits backend code execution](https://agentprime.io/advisories/CVE-2026-61707.md) `CVE-2026-61707` · CVE record: socfortress CoPilot · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection, Broken access control - [Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields](https://agentprime.io/advisories/CVE-2026-119144.md) `CVE-2026-119144` · CVE record: frappe frappe · CVSS 8.7 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for](https://agentprime.io/advisories/CVE-2026-119121.md) `CVE-2026-119121` · CVE record: unclecode crawl4ai · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server](https://agentprime.io/advisories/CVE-2026-90872.md) `CVE-2026-90872` · CVE record: Progress Software WS_FTP Server · CVSS 6.6 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-61991.md) `CVE-2026-61991` · CVE record: Ajax Load More AjaxLoadMore Cache · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-18894.md) `CVE-2026-18894` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-101288.md) `CVE-2026-101288` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-104328.md) `CVE-2026-104328` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-104339.md) `CVE-2026-104339` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-107328.md) `CVE-2026-107328` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-107329.md) `CVE-2026-107329` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-110186.md) `CVE-2026-110186` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-110193.md) `CVE-2026-110193` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Langflow OSS is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-110309.md) `CVE-2026-110309` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection](https://agentprime.io/advisories/CVE-2026-119050.md) `CVE-2026-119050` · CVE record: agno-agi agno · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values](https://agentprime.io/advisories/CVE-2026-119028.md) `CVE-2026-119028` · CVE record: oapi-codegen oapi-codegen · CVSS 8.7 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers\[\].x-go-name Extension](https://agentprime.io/advisories/CVE-2026-119027.md) `CVE-2026-119027` · CVE record: oapi-codegen oapi-codegen · CVSS 7.7 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block](https://agentprime.io/advisories/CVE-2026-115301.md) `CVE-2026-115301` · CVE record: Unknown Contact Form by Supsystic · CVSS 7.2 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed](https://agentprime.io/advisories/CVE-2026-118905.md) `CVE-2026-118905` · CVE record: nvm-sh nvm · CVSS 7.1 High · Not analysed yet · Published 29 Oct 2026 · Tags: Command injection, Code injection - [An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component](https://agentprime.io/advisories/CVE-2026-51832.md) `CVE-2026-51832` · CVE record · CVSS 7.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component](https://agentprime.io/advisories/CVE-2026-51831.md) `CVE-2026-51831` · CVE record · CVSS 7.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.](https://agentprime.io/advisories/CVE-2026-107050.md) `CVE-2026-107050` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Code injection - [configuroweb inventariobasico Add Product addlist.php cross site scripting](https://agentprime.io/advisories/CVE-2026-118585.md) `CVE-2026-118585` · CVE record: configuroweb inventariobasico · CVSS 5.1 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection - [OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)](https://agentprime.io/advisories/CVE-2026-54453.md) `CVE-2026-54453` · CVE record: opencats OpenCATS · CVSS 7.2 High · Not analysed yet · Published 28 Oct 2026 · Tags: Other injection, Code injection - [AVideo-Encoder: unauthenticated installer PHP code injection](https://agentprime.io/advisories/CVE-2026-61564.md) `CVE-2026-61564` · CVE record: WWBN AVideo-Encoder · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Seroval: Code injection through a typed array's own constructor property](https://agentprime.io/advisories/GHSA-f86p-h4j2-7qgj.md) `GHSA-f86p-h4j2-7qgj`, `CVE-2026-116583` · npm `seroval`: affected `>=1.6.0, <1.6.11`, fixed in `1.6.11` · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection - [Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_result](https://agentprime.io/advisories/CVE-2026-118803.md) `CVE-2026-118803` · CVE record: Bricks Bricks Theme · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf](https://agentprime.io/advisories/CVE-2026-118683.md) `CVE-2026-118683` · CVE record: Project-MONAI MONAI · CVSS 8.6 High · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Ultralytics parse_model Code Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-118618.md) `CVE-2026-118618` · CVE record: Ultralytics Ultralytics · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Ultralytics parse_model Code Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-118616.md) `CVE-2026-118616` · CVE record: Ultralytics Ultralytics · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-118614.md) `CVE-2026-118614` · CVE record: Ultralytics Ultralytics · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Code injection in Jenkins](https://agentprime.io/advisories/CVE-2026-117620.md) `CVE-2026-117620` · CVE record: Jenkins Project Jenkins · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [HCL BigFix AEX is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-67074.md) `CVE-2026-67074` · CVE record: HCL Software BigFix AEX · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Command injection, Code injection - [Code injection in Dell iDRAC Service Module for Windows and others](https://agentprime.io/advisories/CVE-2026-81472.md) `CVE-2026-81472` · CVE record: Dell iDRAC Service Module for Windows and 2 more · CVSS 4.2 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block](https://agentprime.io/advisories/CVE-2026-115223.md) `CVE-2026-115223` · CVE record: Unknown Smart Popup by Supsystic · CVSS 4.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [Code injection in EagleCloud Aquila on-premises version](https://agentprime.io/advisories/CVE-2026-104383.md) `CVE-2026-104383` · CVE record: EagleCloud Aquila · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Code injection - [GRR vulnerable to Remote Code Execution Via PHP Code Injection](https://agentprime.io/advisories/CVE-2026-58256.md) `CVE-2026-58256` · CVE record: JeromeDevome GRR · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection - [MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules](https://agentprime.io/advisories/GHSA-26p8-2jq9-3vq9.md) `GHSA-26p8-2jq9-3vq9`, `CVE-2026-116692` · PyPI `mlflow`: affected `>=3.12.0rc0, <3.17.0`, fixed in `3.17.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection - [reduxjs redux-devtools Remotedev Server evalAction code injection](https://agentprime.io/advisories/CVE-2026-117526.md) `CVE-2026-117526` · CVE record: reduxjs redux-devtools · CVSS 4.8 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Other injection, Code injection - [Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://agentprime.io/advisories/CVE-2026-104351.md) `CVE-2026-104351` · CVE record: Adobe Adobe Campaign Classic · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection - [Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://agentprime.io/advisories/CVE-2026-48360.md) `CVE-2026-48360` · CVE record: Adobe Adobe Connect Desktop App and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection - [vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution](https://agentprime.io/advisories/GHSA-h3rc-6mm3-gc2m.md) `GHSA-h3rc-6mm3-gc2m`, `CVE-2026-114053` · PyPI `vllm`: affected `>=0.7.3, <0.31.0`, fixed in `0.31.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection, CWE-829 - [Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting](https://agentprime.io/advisories/CVE-2026-116640.md) `CVE-2026-116640` · CVE record: Saruf-Ratul HR-Payroll-Management-System · CVSS 5.1 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection - [MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting](https://agentprime.io/advisories/CVE-2026-116639.md) `CVE-2026-116639` · CVE record: MD-MAFUJUL-HASAN Online-Payroll-Management-System · CVSS 5.1 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection - [Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root descrip…](https://agentprime.io/advisories/CVE-2026-78845.md) `CVE-2026-78845` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection - [OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template](https://agentprime.io/advisories/CVE-2026-116811.md) `CVE-2026-116811` · CVE record: Openpanel-dev openpanel · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Code injection - [Argilla TextField.vue cross site scripting](https://agentprime.io/advisories/CVE-2026-116556.md) `CVE-2026-116556` · CVE record: Argilla · CVSS 4.8 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection - [Argilla Sandbox.vue cross site scripting](https://agentprime.io/advisories/CVE-2026-116555.md) `CVE-2026-116555` · CVE record: Argilla · CVSS 4.8 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection - [Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scripting](https://agentprime.io/advisories/CVE-2026-116554.md) `CVE-2026-116554` · CVE record: Argilla · CVSS 5.1 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .