Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection
- TinyLLaVA_Factory
- Other injection
- Code injection
- CVSS 4.8 Medium
iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection
- iMoonLab yolov13
- Other injection
- Code injection
- CVSS 2.4 Low
repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection
- repository RAE
- Other injection
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
- SAP_SE SAP S/4HANA (Manage Substitution/Validation Rules)
- Code injection
- CVSS 4.8 Medium
ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection
- ModelTC LightX2V
- Other injection
- Code injection
- CVSS 5.1 Medium
philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting
- philz1337x clarity-upscaler
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.
- Code injection
- CVSS 2.4 Low
Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
- Linketic CityGaussian
- Other injection
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI
- i
- Code injection
- CVSS 4.8 Medium
Edimax BR-6208AC QoS Page formQoS cross site scripting
- Edimax BR-6208AC
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.8 High
DataStage on Cloud Pak for Data Code Injection
- IBM DataStage on Cloud Pak for Data
- Code injection
- CVSS 8.7 High
Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields
- frappe erpnext
- Code injection
- CVSS 4.8 Medium
Edimax BR-6208AC Port Forwarding formPortFw cross site scripting
- Edimax BR-6208AC
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Edimax BR-6208AC HTTP Blocking formUrlb cross site scripting
- Edimax BR-6208AC
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Edimax BR-6208AC formFilter cross site scripting
- Edimax BR-6208AC
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Maximo AI Service Code Injection
- IBM Maximo AI Service
- Code injection
- CVSS 5.3 Medium
Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
- Netcore NR268
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.5 Medium
IBM Maximo Application Suite - Location Service for Esri Component Code Execution
- IBM Maximo Application Suite - Location Service for Esri Component
- Code injection
- CVSS 8.7 High
IBM Maximo Application Suite - Location Service for Esri Component Code Execution
- IBM Maximo Application Suite - Location Service for Esri Component
- Code injection
- CVSS 5.3 Medium
Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
- Netcore NR268
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scripting
- SourceCodester Drug Recommendation System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
SourceCodester Drug Recommendation System Student Registration add_student.php cross site scripting
- SourceCodester Drug Recommendation System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
- Netcore NR268
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.6 High
Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass
- vrana adminer
- Code injection
- CVSS 8.7 High
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection
- cms
- Code injection
- CVSS 8.7 High
Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every
- cms
- Code injection
- CVSS 8.8 High
CVE-2026-107248
- Thelia
- Code injection
- CVSS 5.1 Medium
Netis WF2409E Wireless Settings cross site scripting
- Netis WF2409E
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.4 Medium
CVE-2026-103537
- Thelia
- Code injection
- CVSS 8.8 High
CVE-2026-103535
- Thelia
- Code injection
- Unrestricted file upload
- CVSS 5.4 Medium
CVE-2026-103528
- Thelia
- Code injection
- CVSS 8.7 High
LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
- LogicalDOC Community Edition
- Code injection
- CVSS 5.3 Medium
Cairo-dock Glx-Dock Query Parameter ww_page.php cross site scripting
- Cairo-dock Glx-Dock
- Cross-site scripting (XSS)
- Code injection
- CVSS 2.1 Low
Zen Cart Administrative Module Management general.php zen_call_function code injection
- Zen Cart
- Other injection
- Code injection
- CVSS 5.3 Medium
agno-agi agno PythonTools python.py run_python_code code injection
- agno
- Other injection
- Code injection
- CVSS 5.1 Medium
idcCMS member_deal.php cross site scripting
- idcCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting
- y_project RuoYi
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine
- Furion .NET Framework
- Code injection
- CWE-791
- CVSS 5.1 Medium
InstantSoft icms2 Private Message index.tpl.php index cross site scripting
- InstantSoft icms2
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.5 Medium
WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability
- kutethemes Boutique
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability
- Royal Plugins SiteVault – Backup, Restore, Migration & Cloning
- Code injection
- CVSS 8.1 High
WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability
- everestthemes Everest Backup
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates
- floci
- Code injection
- CVSS 7.3 High
9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint
- decolua 9router
- Code injection
- CVSS 7.5 High
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability
- VillaTheme Thank You Page Customizer for WooCommerce
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates
- ferdikoomen openapi-typescript-codegen
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field
- themefusion Avada (Fusion) Builder
- Code injection
- CVSS 7.2 High
Fastcache by Host.it <= 1.7.4 - Authenticated (Administrator+) Code Injection via .htaccess Directive Injection via 'cache_cookie_exclude' Setting
- hostspa Fastcache by Host.it
- Code injection
- CVSS 8.2 High
Tina: Code injection via unescaped Git branch name in generated client source
- Code injection
<3.0.0 · fixed in 3.0.0
GHSA-pwhx-cvv3-qj5c · CVE-2026-108259 - CVSS 9.1 CriticalCritical · CVSS 9+
Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE)
- wizarr
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Astron Agent: Unsandboxed code-node leads to cross-tenant RCE
- iflytek astron-agent
- Code injection
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
- Code injection
>=1.9.10-0.20260421071512-7864e378f5cf, <1.9.10-0.20260728074146-a467ed652591 · fixed in 1.9.10-0.20260728074146-a467ed652591
GHSA-p393-cf76-4jmr · CVE-2026-107806 - CVSS 8.6 High
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
- Smartertools Smartermail
- Code injection
- CVSS 7.7 High
Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or Code
- Grid Protection Alliance openPDC
- Grid Protection Alliance openPDC (Docker image)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua.
- Code injection
- CVSS 8.4 High
SumatraPDF: Markup/command-link injection into UI notification text
- sumatrapdf
- Code injection
- CVSS 6.4 Medium
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- IBM Security Verify Access
- IBM Verify Identity Access
- Code injection
- CVSS 8.5 High
PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source
- Code injection
- CWE-116
<4.6.78 · fixed in 4.6.78
GHSA-79fv-7hq9-w7xg · CVE-2026-61433 - CVSS 9.3 CriticalCritical · CVSS 9+
dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument
- ntharim dot-access
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)
- Code injection
- Memory corruption
>=4.0.0, <4.7.10 · fixed in 4.7.10
GHSA-8r5x-fm3f-whwj · CVE-2026-106446