Weaknesses of type CWE-95

224 results

Injeção em código avaliado dinamicamente (Eval Injection)

Ocorre quando a aplicação executa código dinamicamente (via eval, exec ou equivalente) sem neutralizar entrada do usuário. Um atacante injeta comandos maliciosos que são interpretados como código legítimo, permitindo execução arbitrária com os privilégios da aplicação.

Example

Um formulário web recebe um nome de usuário e executa `eval('var nome = "' + inputUsuario + '"')`. Se o usuário injetar `"; malware(); "`, a string malformada executa a função malware com controle total da aplicação.

How to mitigate

Evite eval, exec e similares — use alternativas seguras (JSON.parse em vez de eval para dados, ou templates parametrizados). Se for inevitável usar avaliação dinâmica, valide e escape rigorosamente a entrada, e considere sandbox ou permissões restritivas.

CVE-2026-76190HIGHColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)EPSS 0.8%CVE-2026-73602CRITICALFlowise before 3.1.3 Sandbox Escape to RCEEPSS 0.8%CVE-2024-39173CRITICALcalculator-boilerplate v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the eval function at /routes/calculatoEPSS 0.8%CVE-2025-55728CRITICALXWiki Remote Macros vulnerable to remote code execution using the panel macroEPSS 0.8%CVE-2026-1665MEDIUMCommand Injection in nvm via NVM_AUTH_HEADER in wget code pathEPSS 0.8%CVE-2026-74899CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Type HierarchyEPSS 0.8%CVE-2023-0090CRITICALProofpoint Enterprise Protection webservices unauthenticated RCEEPSS 0.7%CVE-2023-48699HIGHfastbots Eval Injection vulnerabilityEPSS 0.7%CVE-2023-0089HIGHProofpoint Enterprise Protection webutils authenticated RCEEPSS 0.7%CVE-2026-15971CRITICALCVE-2026-15971EPSS 0.7%CVE-2026-46586HIGHApache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code ExecutionEPSS 0.7%CVE-2026-44179CRITICALXWiki Pro Macros: excerpt-include title and content injection executes codeEPSS 0.7%CVE-2026-50733HIGHMarkdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()EPSS 0.7%CVE-2026-69253CRITICALFlowise Sandbox Escape to RCEEPSS 0.7%CVE-2025-27603CRITICALXWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translationsEPSS 0.7%CVE-2026-71865CRITICALOrval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cliEPSS 0.7%CVE-2026-71867CRITICALOrval: RCE via schema property name -> computed-property-key injection in the MSW mock generatorEPSS 0.7%CVE-2026-71864CRITICALOrval: Import-time RCE via header parameter name -> computed-property-key injection in the zod clientEPSS 0.7%CVE-2026-71866CRITICALOrval: Import-time RCE via schema property name -> computed-property-key injection in the zod clientEPSS 0.7%CVE-2026-57149CRITICALplone.app.portlets Vulnerable to Remote Code Execution via TALES InjectionEPSS 0.6%