CWE-470

142 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

Critical 32High 73Medium 33Low 2Not scored 2

CVEs per yearBy the year they were published

CVE-2026-82078
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
PaperCut · PaperCut MF/NG
ExploitedCritical9.4
CVE-2021-21985
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is…
VMware vCenter Server and VMware Cloud Foundation
ExploitedCritical9.8

CVE-2026-119084
Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
AWS · amazon-redshift-jdbc-driver
Critical9.2
CVE-2026-119578
MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()
Project-MONAI · MONAI
High8.5
CVE-2026-108097
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
Drupal · Drupal core
Not scored
CVE-2026-108099
Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218
Drupal · Entity List
Not scored
CVE-2026-119050
Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
agno-agi · agno
Critical9.2
CVE-2026-116692
MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
mlflow · mlflow
Critical9.8
CVE-2026-115931
Arbitrary file read and backend crash through unrestricted provider method calls
GitroomHQ · postiz-app
Critical9.9
CVE-2026-115886
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
mlflow · mlflow
Medium6.5
CVE-2026-115749
hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import
hydra-ecosystem · hydra-ray-launcher
Medium4.8
CVE-2026-111851
WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability
WProyal · Royal Elementor Addons
High7.6