Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 9.3 CriticalCritical · CVSS 9+
AirControl 1.4.2 - PreAuth Remote Code Execution
- Ubiquiti, Inc. AirControl
- Code injection
- CVSS 4.8 Medium
D-Link DSL-6641K Web ad_virtual_server_vdsl cross site scripting
- D-Link DSL-6641K
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.3 High
Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload
- Code injection
<3006.17 · fixed in 3006.17
GHSA-77w2-v593-vxvv · CVE-2025-62348 - CVSS 9.3 CriticalCritical · CVSS 9+
Orval has Code Injection via unsanitized x-enum-descriptions using JS comments
- Code injection
- CWE-84
>=7.19.0, <7.21.0 || >=8.0.0, <8.2.0 · fixed in 7.21.0, 8.2.0
GHSA-gch2-phqh-fg9q · CVE-2026-25141 - CVSS 8.8 High
DiscussionTools should use better regex
- The Wikimedia Foundation Mediawiki - DiscussionTools Extension
- Code injection
- CVSS 5.1 Medium
projectworlds House Rental and Property Listing sms.php cross site scripting
- projectworlds House Rental and Property Listing
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.4 Medium
Command Injection in nvm via NVM_AUTH_HEADER in wget code path
- nvm
- Command injection
- Code injection
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Code injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Code injection
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Code injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Code injection
- CVSS 5.1 Medium
Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting
- Bdtask Bhojon All-In-One Restaurant Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.6 High
AutoGPT is Vulnerable to RCE via Disabled Block Execution
- Code injection
- Broken access control
<=0.2.2 · no fixed version yet
GHSA-r277-3xc5-c79v · CVE-2026-24780 - CVSS 8.8 High
A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privilege…
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Authenticated Remote Code Execution via Arbitrary File Upload
- Erugo
- Path traversal
- Code injection
- CVSS 7.8 High
BrowserStack Local vulnerable to Command Injection through logfile variable
- Command injection
- Code injection
<1.5.9 · fixed in 1.5.9
GHSA-g4w6-c99w-4wh7 · CVE-2025-57283 - CVSS 4.8 Medium
rethinkdb Secondary Index cross site scripting
- rethinkdb
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.8 High
An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/ne…
- Code injection
- CVSS 8.8 High
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
- Code injection
- Insecure deserialization
<2.10.0 · fixed in 2.10.0
GHSA-63cw-57p8-fm3p · CVE-2026-24747 - CVSS 10.0 CriticalCritical · CVSS 9+
SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
- Code injection
- CWE-693
<0.8.26 · fixed in 0.8.26
GHSA-wxhw-j4hc-fmq6 · CVE-2026-23830 - CVSS 10.0 CriticalCritical · CVSS 9+
Code injection in Minecraft-Rcon-Manage
- pilgrimage233 Minecraft-Rcon-Manage
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution
- Code injection
<1.123.17 || >=2.0.0, <2.4.5 || >=2.5.0, <2.5.1 · fixed in 1.123.17, 2.4.5, 2.5.1
GHSA-5xrp-6693-jjx9 · CVE-2026-1470 - CVSS 5.3 Medium
Quick-Media Batik Codec FIX package has Code Injection vulnerability
- Code injection
<=3.0.0 · no fixed version yet
GHSA-8623-9fwr-4cxv · CVE-2026-24806 - CVSS 9.8 CriticalCritical · CVSS 9+
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserName, Password, confirm_password, Role, Branch, and Activate para…
- Code injection
- CVSS 4.8 Medium
iJason-Liu Books_Manager add_book_check.php cross site scripting
- iJason-Liu Books_Manager
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
vm2 has a Sandbox Escape
- Code injection
- CWE-693
<3.10.2 · fixed in 3.10.2
GHSA-99p7-6v5w-7xg8 · CVE-2026-22709 - CVSS 5.1 Medium
code-projects Online Examination System Add Pages cross site scripting
- code-projects Online Examination System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Dioxus Components has JavaScript injection via user-supplied IDs
- DioxusLabs components
- Code injection
- CVSS 4.3 Medium
Template injection in Dell Data Protection Advisor
- Dell Data Protection Advisor
- Code injection
- CVSS 7.3 High
BuddyPress <= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution
- BuddyPress
- Code injection
- CVSS 8.8 High
Moodle affected by a code injection vulnerability
- Code injection
<4.1.22 || >=4.2.0-beta, <4.4.12 || >=4.5.0-beta, <4.5.8 || >=5.0.0-beta, <5.0.4 || >=5.1.0-beta, <5.1.1 · fixed in 4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1
GHSA-xvmh-25jw-gmmm · CVE-2025-67847 - CVSS 7.1 High
Langflow PythonFunction Code Injection Remote Code Execution Vulnerability
- Langflow
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability
- Langflow
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Langflow code Code Injection Remote Code Execution Vulnerability
- Langflow
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability
- Foundation Agents MetaGPT
- Code injection
- CVSS 7.7 High
Orval Mock Generation Code Injection via const
- Command injection
- Code injection
<7.20.0 || >=8.0.0-rc.0, <8.0.3 · fixed in 7.20.0, 8.0.3
GHSA-f456-rf33-4626 · CVE-2026-24132 - CVSS 7.5 High
WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability
- Beaver Builder
- Code injection
- CVSS 5.3 Medium
WordPress FluentForm plugin <= 6.1.11 - Arbitrary Shortcode Execution vulnerability
- Shahjahan Jewel FluentForm
- Code injection
- CVSS 9.0 CriticalCritical · CVSS 9+
WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability
- Vollstart Event Tickets with Ticket Scanner
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability
- Nelio Software Nelio AB Testing
- Code injection
- CVSS 9.7 CriticalCritical · CVSS 9+
5ire vulnerable to Remote Code Execution (RCE) via ECharts
- nanbingxyz 5ire
- Code injection
- CVSS 8.6 High
GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection
- Get-Simple My SMTP Contact Plugin
- Code injection
- CVSS 8.6 High
OpenPLC 3 - Remote Code Execution
- Autonomy OpenPLC
- Code injection
- CVSS 6.8 Medium
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
- Code injection
- Insecure deserialization
<15.3.12 · fixed in 15.3.12
GHSA-339m-4qw5-j2g3 · CVE-2026-23946 - CVSS 8.2 HighCritical · KEVKEV
Cisco Unified Communications Products Remote Code Execution Vulnerability
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM and Presence Service
- Code injection
- CVSS 8.8 High
vLLM affected by RCE via auto_map dynamic module loading during model initialization
- Code injection
>=0.10.1, <0.14.0 · fixed in 0.14.0
GHSA-2pc9-4j83-qjmr · CVE-2026-22807 - CVSS 6.4 Medium
AlchemyCMS: Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper
- Code injection
<7.4.12 || >=8.0.0.a, <8.0.3 · fixed in 7.4.12, 8.0.3
GHSA-2762-657x-v979 · CVE-2026-23885 - CVSS 9.3 CriticalCritical · CVSS 9+
Orval has a code injection via unsanitized x-enum-descriptions in enum generation
- Command injection
- Code injection
<7.19.0 || >=8.0.0-rc.0, <8.0.2 · fixed in 7.19.0, 8.0.2
GHSA-h526-wf6g-67jv · CVE-2026-23947 - CVSS 6.5 Medium
binary-parser library has a code injection vulnerability
- Code injection
<2.3.0 · fixed in 2.3.0
GHSA-m39p-34qh-rh3w · CVE-2026-1245 - CVSS 9.8 CriticalCritical · CVSS 9+
XDocReport affected by a Server-Side Template Injection (SSTI) vulnerability
- Code injection
<2.2.0 · fixed in 2.2.0
GHSA-r8w2-w357-9pjv · CVE-2025-64087 - CVSS 6.4 Medium
Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE)
- Code injection
<=1.143.2 · no fixed version yet
GHSA-4gpc-rhpj-9443 · CVE-2026-23733 - CVSS 7.8 High
Code injection in NVIDIA Merlin Transformers4Rec
- NVIDIA Merlin Transformers4Rec
- Code injection
- CVSS 6.8 Medium
Kimai has an Authenticated Server-Side Template Injection (SSTI)
- Code injection
<2.46.0 · fixed in 2.46.0
GHSA-jg2j-2w24-54cg · CVE-2026-23626 - CVSS 9.8 CriticalCritical · CVSS 9+
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is pass…
- Code injection
- CVSS 5.8 Medium
SiYuan vulnerable to Stored XSS / RCE via `setBlockAttrs` icon attribute
- siyuan
- Code injection
- CVSS 5.1 Medium
pbrong hrms recruitment.go UpdateRecruitmentById cross site scripting
- pbrong hrms
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
technical-laohu mpay User Center cross site scripting
- technical-laohu mpay
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_patient_schedule.php cross site scripting
- SourceCodester Patients Waiting Area Queue Management System
- Patrick Mvuma Patients Waiting Area Queue Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scripting
- SourceCodester Patients Waiting Area Queue Management System
- Patrick Mvuma Patients Waiting Area Queue Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
lcg0124 BootDo ContentController save cross site scripting
- lcg0124 BootDo
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
itsourcecode Society Management System activity.php cross site scripting
- itsourcecode Society Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
itsourcecode Society Management System expenses.php cross site scripting
- itsourcecode Society Management System
- Cross-site scripting (XSS)
- Code injection