CWE-94: Code injection
7,620 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 82 of them as exploited in the wild.
- Published CVEs
- 7,620
- Last 12 months
- 2,225
- Critical
- 1,591
- Known exploited
- 82
Critical 1,591High 3,205Medium 2,763Low 60Not scored 1
CVEs per yearBy the year they were published
- 2025167
- 2025132
- 2025111
- 2025241
- 20261,902
- 20261,316
- 2026868
- 2026464
- 2026225
- 2026208
- 2026122
- 2026129
Known exploitedNewest addition to KEV first
- CVE-2026-0322
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Palo Alto Networks · Cloud NGFW
ExploitedHigh8.6 - CVE-2026-65660
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedHigh8.8 - CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
Gitea · Gitea
ExploitedCritical9.8 - CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…
TrueConf · TrueConf Server
ExploitedCritical9.5 - CVE-2025-62593
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
ray-project · ray
ExploitedCritical9.4 - CVE-2026-9198
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
IBM · Langflow OSS
ExploitedCritical9.8 - CVE-2026-15410
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console…
SonicWall · SMA1000
ExploitedHigh7.2 - CVE-2008-4250
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote…
Product not named
ExploitedCritical9.8 - CVE-2026-34197
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
Apache Software Foundation · Apache ActiveMQ Broker
ExploitedHigh8.8 - CVE-2009-0238
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and…
Product not named
ExploitedHigh8.8
Newest CVEs
- CVE-2026-115731
Report Deserialization Code Execution
Perforce · Puppet Enterprise
Critical9.4 - CVE-2026-115878
Stanza: RCE via pickle deserialization in the lemmatizer
stanfordnlp · stanza
High7.8 - CVE-2026-63471
fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator
koxudaxi · fastapi-code-generator
Critical9.3 - CVE-2026-63469
fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict
koxudaxi · fastapi-code-generator
Critical9.3 - CVE-2026-63470
fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring
koxudaxi · fastapi-code-generator
Critical9.3 - CVE-2026-44267
Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter
enspirit · elo
Critical9.8 - CVE-2026-44266
Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
enspirit · elo
Critical9.8 - CVE-2026-44265
Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields
enspirit · elo
High7.4 - CVE-2026-121260
Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection
Ziroom · ZHOME A0101
Critical9.4 - CVE-2026-121428
AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone
AzuraCast · AzuraCast
High8.7