Sign in Sign up
JA · EN · FR
SecPulse

Cwe 94

🧬 CWE Related 1,871
slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。 リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。
📌 Example
Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 1,877

Image ID Title
CVE-2026-54655 Code Injection in datamodel-code-generator (CVE-2026-54655)
CVE-2026-66745 Code Injection in Artica Proxy (CVE-2026-66745)
CVE-2026-66748 Code Injection in Camaleon CMS (CVE-2026-66748)
CVE-2026-65880 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 -...
CVE-2026-56747 Code Injection in Cribl Stream (CVE-2026-56747)
CVE-2026-14289 Code Injection in FacturaONE para WooCommerce con VeriFactu (WordPress plugin) (CVE-2026-14289)
CVE-2026-63720 Code Injection in datamodel-code-generator (CVE-2026-63720)
CVE-2026-73505 Code Injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505)
CVE-2026-62379 Code Injection in org.openidentityplatform.openam:openam-core (CVE-2026-62379)
CVE-2026-73649 Code Injection in velocityjs (CVE-2026-73649)
CVE-2026-65693 Code Injection in Microweber CMS (CVE-2026-65693)
CVE-2026-16801 Code Injection in Devolutions PowerShell Universal (CVE-2026-16801)
CVE-2026-16800 Code Injection in Devolutions PowerShell Universal (CVE-2026-16800)
CVE-2025-71389 Code Injection in Cal.com (CVE-2025-71389)
CVE-2026-60122 gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in...
CVE-2026-65907 Code Injection in JetBrains TeamCity (CVE-2026-65907)
CVE-2026-65906 Code Injection in Jetbrains Teamcity (CVE-2026-65906)
CVE-2026-64802 Code Injection in JetBrains GoLand (CVE-2026-64802)
CVE-2026-64815 Code Injection in JetBrains IntelliJ IDEA (CVE-2026-64815)
CVE-2026-64803 Code Injection in JetBrains GoLand (CVE-2026-64803)
CVE-2026-59543 Code Injection in Advanced Views (CVE-2026-59543)
CVE-2026-15011 Code Injection in Customer Support Ticket System & Helpdesk (WordPress plugin) (CVE-2026-15011)
CVE-2026-16606 Code Injection in Fujitsu Software Linux openFT (CVE-2026-16606)
CVE-2025-13146 Code Injection in Contact Form 7 – Dynamic Text Extension (WordPress plugin) (CVE-2025-13146)
CVE-2026-16486 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-16486)
CVE-2026-16485 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-16485)
CVE-2026-8984 Code Injection in Autel Maxi Charger Single firmware (CVE-2026-8984)
CVE-2026-73651 Code Injection in typeorm (CVE-2026-73651)
CVE-2026-21575 Code Injection in Atlassian Sourcetree (CVE-2026-21575)
CVE-2026-65008 Code Injection in Grav (CVE-2026-65008)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details