Sign in Sign up
JA · EN · FR
SecPulse

Cwe 94

🧬 CWE Related 1,871
slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。 リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。
📌 Example
Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 1,877

Image ID Title
CVE-2026-103535 Code Injection in Thelia (CVE-2026-103535)
CVE-2026-109199 Code Injection in LogicalDOC Community Edition (CVE-2026-109199)
CVE-2026-108834 Cross-Site Scripting (XSS) in Cairo-dock Glx-Dock (CVE-2026-108834)
CVE-2026-108827 Vulnerability in Zen Cart (CVE-2026-108827)
CVE-2026-108815 Cross-Site Scripting (XSS) in idcCMS (CVE-2026-108815)
CVE-2026-108816 Vulnerability in agno-agi agno (CVE-2026-108816)
CVE-2026-108802 Cross-Site Scripting (XSS) in y_project RuoYi (CVE-2026-108802)
CVE-2026-108566 Cross-Site Scripting (XSS) in InstantSoft icms2 (CVE-2026-108566)
CVE-2026-62098 Code Injection in Boutique (CVE-2026-62098)
CVE-2026-42696 Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration &...
CVE-2026-39802 Code Injection in Everest Backup (CVE-2026-39802)
CVE-2026-108598 Code Injection in Floci (CVE-2026-108598)
CVE-2026-108593 Code Injection in 9router (CVE-2026-108593)
CVE-2026-103071 Code Injection in Thank You Page Customizer for WooCommerce (CVE-2026-103071)
CVE-2026-108551 Code Injection in openapi-typescript-codegen (CVE-2026-108551)
CVE-2026-97670 Code Injection in Avada (Fusion) Builder (WordPress plugin) (CVE-2026-97670)
CVE-2026-104021 Code Injection in WordPress Apache (CVE-2026-104021)
CVE-2026-108259 Code Injection in @tinacms/cli (CVE-2026-108259)
CVE-2026-78797 An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary...
CVE-2026-104082 SmarterMail before build 9777 contains a remote code execution vulnerability that allows an...
CVE-2026-107806 Code Injection in github.com/0xJacky/Nginx-UI (CVE-2026-107806)
CVE-2026-107732 Code Injection in SumatraPDF is a multi-format reader for Windows. In (CVE-2026-107732)
CVE-2026-11888 Code Injection in IBM Security Verify Access (CVE-2026-11888)
CVE-2026-107700 Code Injection in dot-access (CVE-2026-107700)
CVE-2026-105404 Code Injection in ImageMagick (CVE-2026-105404)
CVE-2026-76484 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering...
CVE-2026-106577 Code Injection in ImageMagick (CVE-2026-106577)
CVE-2026-62176 Code Injection in PraisonAI (CVE-2026-62176)
CVE-2026-96408 Code Injection in Movable Type (CVE-2026-96408)
CVE-2026-104677 Code Injection in WP Coder (WordPress plugin) (CVE-2026-104677)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details