Cwe 94

🧬 CWE Related 1,871

slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。

📌 Example

Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。

🔗 Related links

MITRE CWE-94 公式ページ ↗

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 1,872

ID	Title	Severity	Detected
CVE-2026-106621	Code Injection in Adobe Coldfusion (CVE-2026-106621)	Critical	4 days ago
CVE-2026-106624	Code Injection in Adobe Coldfusion (CVE-2026-106624)	Critical	4 days ago
CVE-2026-105903	Code Injection in Adobe Coldfusion (CVE-2026-105903)	Critical	4 days ago
CVE-2026-102870	Code Injection in Microsoft.AspNetCore.Components.WebAssembly.Server (CVE-2026-102870)	High	4 days ago
CVE-2026-63146	Code Injection in Omnispace Agora Project (CVE-2026-63146)	Critical	4 days ago
CVE-2026-96220	Code Injection in Microsoft Windows Assigned Access (CVE-2026-96220)	High	4 days ago
CVE-2026-85359	Code Injection in Microsoft Windows Performance Monitor (CVE-2026-85359)	High	4 days ago
CVE-2026-83759	Code Injection in Microsoft Windows Encrypting File System (CVE-2026-83759)	High	4 days ago
CVE-2026-103572	Code Injection in Microsoft (CVE-2026-103572)	High	4 days ago
CVE-2026-102863	Code Injection in Microsoft Sharepoint Server (CVE-2026-102863)	High	4 days ago
CVE-2026-108380	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108384	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108383	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108385	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108379	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108382	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108381	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108375	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108376	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108378	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-108377	dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates…	High	4 days ago
CVE-2026-104126	Code Injection in JumpServer (CVE-2026-104126)	Medium	4 days ago
CVE-2026-55695	FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an…	Critical	4 days ago
CVE-2026-78802	An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3...	Critical	4 days ago
CVE-2026-55376	Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40…	High	4 days ago
CVE-2026-55675	The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit…	Critical	4 days ago
CVE-2026-103965	Code Injection in MongoDB Server's aggregation framework (CVE-2026-103965)	Medium	4 days ago
CVE-2026-108962	Vulnerability in storyicon comfyui_segment_anything (CVE-2026-108962)	Medium	5 days ago
CVE-2026-108961	Vulnerability in PaddlePaddle PaddleX (CVE-2026-108961)	Medium	5 days ago
CVE-2026-108957	Vulnerability in TinyLLaVA TinyLLaVA_Factory (CVE-2026-108957)	Medium	5 days ago