CWE-829

298 vulnerabilities with CWE-829

CVE-2026-1699 CRITICAL

Eclipse Theia Website - Code Injection

CVSS 10.0

CVE-2026-0770 CRITICAL KEV

Langflow validate exec_globals - Unauthenticated Root Code Execution

CVSS 9.8

CVE-2026-22865 HIGH

Gradle < 8.14.4 - Dependency Resolution Bypass via Non-Fatal Repository Exception Handling

CVSS 7.4

CVE-2026-22816 HIGH

Gradle < 8.14.4 - Dependency Resolution Bypass via Unresolvable Host Name

CVSS 7.4

CVE-2025-39666 HIGH

omd: Local privilege escalation when executing omd commands as root

CVSS 7.3

CVE-2025-15612 MEDIUM

Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

CVSS 4.8

CVE-2025-55273 MEDIUM

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability

CVSS 4.3

CVE-2025-70046 CRITICAL

Miazzy oa-front-service master - Code Injection

CVSS 9.8

CVE-2025-68924 HIGH

Umbraco UmbracoForms <8.13.16 - Authenticated RCE

CVSS 7.5

CVE-2025-70974 CRITICAL

Fastjson < 1.2.48 - Remote Code Execution via AutoType Deserialization

CVSS 10.0

CVE-2025-69257 MEDIUM

theshit < 0.1.1 - Privilege Escalation via Untrusted Configuration File Execution

CVSS 6.7

CVE-2025-67842 MEDIUM

Mintlify Platform <2025-11-15 - XSS

CVSS 6.4

CVE-2025-68162 LOW

JetBrains TeamCity <2025.11 - Code Injection

CVSS 2.7

CVE-2025-67900 HIGH

NXLog Agent < 6.11 - Untrusted Functionality Inclusion via OPENSSL_CONF Environment Variable

CVSS 8.1

CVE-2025-65964 HIGH

n8n 0.123.1-1.119.1 - Remote Code Execution via Git Hook Path Manipulation

CVSS 8.8

CVE-2025-53841 HIGH

Akamai Guardicore Platform Agent for Windows <49.20.1-52.2.0 - Priv...

CVSS 7.8

CVE-2025-66022 CRITICAL

OWASP Faction < 1.7.1 - Unauthenticated Remote Code Execution via Malicious Extension Upload

CVSS 9.6

CVE-2025-33205 HIGH

NVIDIA NeMo < 2.5.1 - Remote Code Execution via Predefined Variable

CVSS 7.3

CVE-2025-64496 HIGH

Open WebUI < 0.6.35 - Remote Code Execution via Direct Connections SSE Event Injection

CVSS 7.3

CVE-2025-12509 HIGH

Bizerba BRAIN2 < 3.07 - Authenticated Remote Code Execution via Global_Shipping Script

CVSS 8.4

CVE-2025-62726 HIGH

n8n < 1.113.0 - Remote Code Execution via Git Node Pre-Commit Hook

CVSS 8.8

CVE-2025-11023 CRITICAL

AcBakImzala <5.1.4 - Code Injection

CVSS 9.8

CVE-2025-41390 HIGH

Truffle Security Co. TruffleHog <3.90.2 - RCE

CVSS 7.8

CVE-2025-52655 LOW

HCL MyXalytics <6.6 - Code Injection

CVSS 3.1

CVE-2025-62186 MEDIUM

Ankiect's Anki <25.02.5 - Command Injection

CVSS 6.7