Sign in Sign up
JA · EN · FR
SecPulse

Cwe 94

🧬 CWE Related 1,871
slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。 リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。
📌 Example
Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 1,877

Image ID Title
CVE-2026-67531 Code Injection in FrontMCP (CVE-2026-67531)
CVE-2026-71320 Vulnerability in nuxt (CVE-2026-71320)
CVE-2026-71319 Code Injection in @nuxt/devtools (CVE-2026-71319)
CVE-2026-55522 Code Injection in praisonaiagents (CVE-2026-55522)
CVE-2026-9196 Code Injection in Langflow (CVE-2026-9196)
CVE-2026-8478 Code Injection in Langflow (CVE-2026-8478)
CVE-2026-8182 Code Injection in Langflow (CVE-2026-8182)
CVE-2026-17633 Code Injection in Langflow (CVE-2026-17633)
CVE-2026-17632 Code Injection in Langflow (CVE-2026-17632)
CVE-2026-17624 Code Injection in Langflow (CVE-2026-17624)
CVE-2026-70431 Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that...
CVE-2026-70609 Code Injection in electron (CVE-2026-70609)
CVE-2026-71278 rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller...
CVE-2026-46581 Path Traversal in Eclipse Mojarra (CVE-2026-46581)
CVE-2026-71235 Code Injection in Magistrala (CVE-2026-71235)
CVE-2026-71232 Code Injection in MacCMS10 (CVE-2026-71232)
CVE-2026-51401 Code Injection in Vim Project (CVE-2026-51401)
CVE-2026-70553 Code Injection in MaxSite CMS (CVE-2026-70553)
CVE-2026-70477 Code Injection in flowise (CVE-2026-70477)
CVE-2026-64633 A vulnerability allowing remote unauthenticated code execution on the agent host.
CVE-2026-58074 A vulnerability allowing a high-privileged user to execute arbitrary code on the server.
CVE-2026-69264 Code Injection in flowise (CVE-2026-69264)
CVE-2026-69100 Code Injection in LAMP Rapid Development Platform (CVE-2026-69100)
CVE-2026-69259 Code Injection in flowise (CVE-2026-69259)
CVE-2026-69256 Code Injection in flowise-components (CVE-2026-69256)
CVE-2026-69255 Code Injection in flowise (CVE-2026-69255)
CVE-2026-18770 Vulnerability in vibesurf-ai VibeSurf (CVE-2026-18770)
CVE-2026-69254 Code Injection in flowise (CVE-2026-69254)
CVE-2026-69251 Code Injection in flowise (CVE-2026-69251)
CVE-2026-16623 Code Injection in Create Block (WordPress plugin) (CVE-2026-16623)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details