Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.2 High
Tanium addressed an unauthorized code execution vulnerability in Comply.
- Tanium Comply
- Code injection
- CVSS 8.4 High
An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, descriptorTime_slice_fec_identifier() and gf_m2ts_ipdatagram_…
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in Actions Semiconductor Co.
- Code injection
- CVSS 7.8 High
Local Privilege Escalation in Auth0 AD/LDAP Connector
- Auth0 AD/LDAP Connector
- Code injection
- CVSS 6.7 Medium
Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
- Okta Access Gateway
- Code injection
- CVSS 6.6 Medium
Improper Input Handling in Okta Access Gateway Management Console Exception Handler
- Okta Access Gateway
- Code injection
- CVSS 6.6 Medium
Improper Input Sanitization in Okta Access Gateway Application Label Configuration
- Okta Access Gateway
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Code injection
- CVSS 8.6 High
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE
- Command injection
- Code injection
<3.1.59 · fixed in 3.1.59
GHSA-284h-m62q-gf8w · CVE-2026-78676 - CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Gitea: Remote Code Execution via diffpatch Git Hook Installation
- Code injection
>=1.17.0, <1.27.1 · fixed in 1.27.1
GHSA-rcr6-4jqh-j84m · CVE-2026-60004 - CVSS 7.0 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Code injection
- Information disclosure
- CVSS 8.2 High
Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Animate 2023
- Adobe Animate 2024
- Code injection
- CVSS 5.5 Medium
InstantCMS has Remote Code Execution in package installer
- instantsoft icms2
- Code injection
- Unrestricted file upload
- CVSS 8.8 High
Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Code injection
- CVSS 8.8 High
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 Customer Engagement V9.1
- Code injection
- CVSS 5.3 Medium
aircheng-org iWebShop-5 pic.php uploadFile cross site scripting
- aircheng-org iWebShop-5
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.7 High
Craft CMS before 5.10.12 Remote Code Execution via element-index
- cms
- Code injection
- CVSS 8.7 High
Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE
- cms
- Code injection
- CVSS 5.1 Medium
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
- Nozomi Networks Guardian
- Nozomi Networks CMC
- Code injection
- CVSS 5.1 Medium
star7th showdoc API Page Save Endpoint editormd.js cross site scripting
- star7th showdoc
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.5 Medium
Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution
- beaverbuilder Beaver Builder Page Builder – Drag and Drop Website Builder
- Code injection
- CVSS 8.6 High
Code injection in Siemens Desigo CC ClickOnce Client V6 and others
- Siemens Desigo CC ClickOnce Client V6
- Siemens Desigo CC ClickOnce Client V7
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.
- Code injection
- CVSS 4.6 Medium
In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.
- Code injection
- CVSS 8.8 High
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.
- Code injection
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- Adobe Commerce
- Adobe Commerce B2B
- Code injection
- CVSS 6.5 Medium
Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field
- icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
- Code injection
- CVSS 8.1 High
Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Code injection
- CVSS 5.1 Medium
code-projects Hospital Information System Patient Management editPatient.php cross site scripting
- code-projects Hospital Information System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting
- SourceCodester Simple Traffic Offense System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
- SourceCodester Syllabus-Aligned Learning Management & Examination System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
sfturing ssm_pro Order Endpoint OrderController.java cross site scripting
- sfturing ssm_pro
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
FastAdmin User Controller User.php login cross site scripting
- FastAdmin
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
projectworlds Online Examination System Feedback Form feedback.php cross site scripting
- projectworlds Online Examination System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Projectwolds Online Attendance System profile.php cross site scripting
- Projectwolds Online Attendance System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting
- code-projects Hotel and Tourism Reservation in PHP
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.1 High
Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds
- maximhq Bifrost
- Code injection
- Broken access control
- CVSS 5.1 Medium
code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting
- code-projects Task Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
pre-authentication remote code execution
- N-able N-central
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
- pickplugins Post Grid
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log
- wpmudev Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
- Code injection
- CVSS 8.5 High
CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository
- Code injection
>=0.8.41, <0.8.64 · fixed in 0.8.64
GHSA-gx45-xrj5-g6c4 · CVE-2026-75911 - CVSS 8.5 High
CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)
- Code injection
- Broken access control
>=0.8.41, <0.8.64 · fixed in 0.8.64
GHSA-wrj3-vj8c-784f · CVE-2026-75858 - CVSS 7.1 High
Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
- Amazon awslabs.dynamodb-mcp-server
- Code injection
- CVSS 7.5 High
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- IBM Verify Identity Access
- IBM Security Verify Access
- Code injection
- CVSS 8.8 High
Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint
- IBM Langflow OSS
- Code injection
- CVSS 9.2 CriticalCritical · CVSS 9+
LaVague 0.2.35 Remote Code Execution via eval extraction
- LaVague
- Code injection
- CVSS 8.5 High
aider 0.86.2 Remote Code Execution via .aider.conf.yml
- aider
- Code injection
- CVSS 8.7 High
goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
- goose
- Code injection
- CVSS 8.7 High
OpenPanel before 2.3.0 Remote Code Execution via chart formulas
- openpanel
- Code injection
- CVSS 8.7 High
Grav before 2.0.18 Remote Code Execution via sort filter
- grav
- Code injection
- CVSS 7.2 High
Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
- Hummingbird Performance
- Code injection
- CVSS 5.1 Medium
Eleveo Quality Management Conversation Review cross site scripting
- Eleveo Quality Management
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Eleveo Call Recording Software roleAddAction.do cross site scripting
- Eleveo Call Recording Software
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
light0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scripting
- light0011 cms
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php…
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions.
- Code injection
- CVSS 8.8 High
SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel
- SQL injection
- Code injection
<0.0.0-20260723035036-0a176345e02a · fixed in 0.0.0-20260723035036-0a176345e02a
GHSA-x67c-8pwr-m8g3 · CVE-2026-72807 - CVSS 9.3 CriticalCritical · CVSS 9+
Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)
- Code injection
- CWE-116
<8.21.0 · fixed in 8.21.0
GHSA-fg9p-mrxr-hvq7 · CVE-2026-62681