Sign in Sign up
JA · EN · FR
SecPulse

Cwe 94

🧬 CWE Related 1,871
slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。 リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。
📌 Example
Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 1,877

Image ID Title
CVE-2026-65804 Code Injection in Microsoft Edge (CVE-2026-65804)
CVE-2026-18667 Code Injection in Tenable Sensor Proxy (CVE-2026-18667)
CVE-2026-18682 Cross-Site Scripting (XSS) in OpenAkita (CVE-2026-18682)
CVE-2026-66065 Vulnerability in Ouroboros (CVE-2026-66065)
CVE-2026-61523 Code Injection in WebsiteBaker CMS (CVE-2026-61523)
CVE-2026-69088 Code Injection in getgrav/grav (CVE-2026-69088)
CVE-2026-67340 OS Command Injection in com.arcadedb:arcadedb-engine (CVE-2026-67340)
CVE-2026-16144 Code Injection in Kali Forms — Contact Form & Drag-and-Drop Builder (WordPress plugin) (CVE-2026-16144)
CVE-2026-68770 Code Injection in sentence-transformers (CVE-2026-68770)
CVE-2026-51785 Code Injection in Hugo Leisink Hiawatha v.12.1 and (CVE-2026-51785)
CVE-2026-53510 Code Injection in savon (CVE-2026-53510)
CVE-2026-17561 Code Injection in Logsign SIEM (CVE-2026-17561)
CVE-2026-13392 Code Injection in ElementsKit Elementor Addons (WordPress plugin) (CVE-2026-13392)
CVE-2026-12946 Code Injection in Langflow (CVE-2026-12946)
CVE-2026-13435 Code Injection in Langflow (CVE-2026-13435)
CVE-2026-61536 Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool…
CVE-2026-18245 Code Injection in Amazon (CVE-2026-18245)
CVE-2026-14602 Code Injection in Remote API (WordPress plugin) (CVE-2026-14602)
CVE-2026-17922 Code Injection in Google Chrome (CVE-2026-17922)
CVE-2026-54666 Vulnerability in swagger-typescript-api (CVE-2026-54666)
CVE-2026-54664 Vulnerability in swagger-typescript-api (CVE-2026-54664)
CVE-2026-54661 Vulnerability in swagger-typescript-api (CVE-2026-54661)
CVE-2026-54662 Vulnerability in swagger-typescript-api (CVE-2026-54662)
CVE-2026-14900 Code Injection in Cost Calculator Builder PRO (WordPress plugin) (CVE-2026-14900)
CVE-2026-13423 Code Injection in Streamit (WordPress theme) (CVE-2026-13423)
CVE-2026-54654 Code Injection in datamodel-code-generator (CVE-2026-54654)
CVE-2026-54653 Code Injection in datamodel-code-generator (CVE-2026-54653)
CVE-2026-54656 Code Injection in datamodel-code-generator (CVE-2026-54656)
CVE-2026-55415 Code Injection in datamodel-code-generator (CVE-2026-55415)
CVE-2026-54621 Code Injection in datamodel-code-generator (CVE-2026-54621)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details