CWE-94

Medium likelihood

Improper Control of Generation of Code ('Code Injection')

Parent: CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

6,710 vulnerabilities with CWE-94
CVE-2026-12946 CRITICAL
IBM Langflow OSS - Remote Code Execution in CUGA Component CodeAgent
CVSS 9.9
CVE-2026-61536 HIGH
Banks < 2.4.3 CompletionExtension - Remote Code Execution
CVSS 7.5
CVE-2026-18245 CRITICAL
Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react
CVSS 9.0
CVE-2026-13435 CRITICAL
Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure
CVSS 9.9
CVE-2026-14602 CRITICAL
Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter
CVSS 9.0
CVE-2026-17922 HIGH
Google Chrome - Arbitrary Code Execution
CVSS 8.8
CVE-2026-54666 HIGH
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
CVSS 8.3
CVE-2026-54664 HIGH
swagger-typescript-api vulnerable to code injection via unescaped enum string values
CVSS 8.3
CVE-2026-54662 HIGH
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
CVSS 8.3
CVE-2026-54661 HIGH
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
CVSS 8.3
CVE-2026-14900 CRITICAL
Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter
CVSS 9.8
CVE-2026-13423 CRITICAL
Streamit <= 4.5.0 - Unauthenticated Remote Code Execution via Arbitrary Function Call
CVSS 9.8
CVE-2026-55415 HIGH
datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements
CVSS 7.5
CVE-2026-54656 HIGH
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
CVSS 7.8
CVE-2026-54655 HIGH
`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator
CVSS 7.8
CVE-2026-54654 HIGH
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
CVSS 7.8
CVE-2026-54653 HIGH
`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
CVSS 8.8
CVE-2026-54621 HIGH
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description
CVSS 7.8
CVE-2026-66745 HIGH
Artica Proxy 4.50 Session Fixation via fw.login.php
CVSS 7.5
CVE-2026-66748 HIGH
Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field
CVSS 8.8
CVE-2026-65880 CRITICAL
Joomla Extension - joomshaper.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3
CVE-2026-56747 HIGH
Code Injection in JSON Pointer Processing Component in Cribl Stream
CVSS 8.8
CVE-2026-14289 CRITICAL
FacturaONE para WooCommerce con VeriFactu < 5.37 - Unauthenticated Remote Code Execution
CVSS 9.0
CVE-2026-63720 HIGH
datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field
CVSS 7.5
CVE-2026-65693 HIGH
Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates
CVSS 7.2
Details
Vulnerabilities 6,710
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits