CWE-94: Code injection
7,652 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 82 of them as exploited in the wild.
- Published CVEs
- 7,652
- Last 12 months
- 2,244
- Critical
- 1,603
- Known exploited
- 82
Critical 1,603High 3,211Medium 2,775Low 61Not scored 2
CVEs per yearBy the year they were published
- 201550
- 201624
- 201791
- 2018166
- 2019143
- 2020103
- 2021166
- 2022236
- 2023425
- 2024776
- 20251,413
- 20262,062
Known exploitedNewest addition to KEV first
- CVE-2026-0322
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Palo Alto Networks · Cloud NGFW
ExploitedHigh8.6 - CVE-2026-65660
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedHigh8.8 - CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
Gitea · Gitea
ExploitedCritical9.8 - CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…
TrueConf · TrueConf Server
ExploitedCritical9.5 - CVE-2025-62593
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
ray-project · ray
ExploitedCritical9.4 - CVE-2026-9198
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
IBM · Langflow OSS
ExploitedCritical9.8 - CVE-2026-15410
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console…
SonicWall · SMA1000
ExploitedHigh7.2 - CVE-2008-4250
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote…
Product not named
ExploitedCritical9.8 - CVE-2026-34197
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
Apache Software Foundation · Apache ActiveMQ Broker
ExploitedHigh8.8 - CVE-2009-0238
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and…
Product not named
ExploitedHigh8.8
Newest CVEs
- CVE-2026-9764
IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution
IBM · Bob Shell
High8.8 - CVE-2026-110273
Security Vulnerability identified in IBM TRIRIGA - Command Execution
IBM · TRIRIGA Application Platform
High8.8 - CVE-2026-124328
FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection
FlowCI · flow-core-x
Medium5.3 - CVE-2026-123992
DataEase SVG StaticResourceServer.java StaticResourceServer.validateSvgContent cross site scripting
DataEase
Medium5.3 - CVE-2026-120984
Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import
Red Hat · Red Hat Build of Keycloak
Critical9.1 - CVE-2026-102564
Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer
wpvibes · Dynific Addons for Elementor (formerly Anywhere Elementor)
Medium6.5 - CVE-2026-103917
Quiz and Survey Master (QSM) <= 11.2.7 - Unauthenticated Arbitrary Shortcode Execution via 'qsm_unique_key' Parameter
expresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
Medium6.5 - CVE-2026-121491
Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header
Unknown · Fiber Admin
Critical9.0 - CVE-2026-17359
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Critical9.9 - CVE-2026-17342
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Critical9.9