Weaknesses of type CWE-95
224 resultsInjeção em código avaliado dinamicamente (Eval Injection)
Ocorre quando a aplicação executa código dinamicamente (via eval, exec ou equivalente) sem neutralizar entrada do usuário. Um atacante injeta comandos maliciosos que são interpretados como código legítimo, permitindo execução arbitrária com os privilégios da aplicação.
Example
Um formulário web recebe um nome de usuário e executa `eval('var nome = "' + inputUsuario + '"')`. Se o usuário injetar `"; malware(); "`, a string malformada executa a função malware com controle total da aplicação.
How to mitigate
Evite eval, exec e similares — use alternativas seguras (JSON.parse em vez de eval para dados, ou templates parametrizados). Se for inevitável usar avaliação dinâmica, valide e escape rigorosamente a entrada, e considere sandbox ou permissões restritivas.
CVE-2025-68271CRITICALUnauthenticated Remote Code Execution in openc3-apiEPSS 0.6%CVE-2024-3562HIGHCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom FieldEPSS 0.6%CVE-2026-77810CRITICALCode Injection via Gremlin Query Passthrough in Amazon Athena Neptune ConnectorEPSS 0.6%CVE-2026-4965MEDIUMletta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injectionEPSS 0.6%CVE-2020-37137HIGHPHP-Fusion 9.03.50 - 'panels.php' Eval InjectionEPSS 0.6%CVE-2026-115943CRITICALSpreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmtEPSS 0.6%CVE-2023-0888MEDIUMAuthenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi EPSS 0.6%CVE-2026-78847CRITICALAn issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter wEPSS 0.6%CVE-2025-58365HIGHXWiki Blog Application: Privilege Escalation (PR) from account through blog contentEPSS 0.6%CVE-2023-26323HIGHXiaomi App Market has a code execution vulnerabilityEPSS 0.6%CVE-2024-10633HIGHQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via contentEPSS 0.6%CVE-2026-85165HIGHn8n before 2.36.2 Expression Sandbox Bypass via SpreadElementEPSS 0.6%CVE-2026-86002CRITICALDokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGSEPSS 0.6%CVE-2026-13048HIGHData::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filenameEPSS 0.6%CVE-2026-53875HIGHpicklescan - Scanning Bypass via Dynamic Eval in scan_pytorchEPSS 0.6%CVE-2024-31986CRITICALXWiki Platform CSRF remote code execution through scheduler job's document referenceEPSS 0.5%CVE-2026-82789HIGHAn improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If explEPSS 0.5%CVE-2025-40943CRITICALAffected devices do not properly sanitize contents of trace files.
This could allow an attacker to inject code through social engineeringEPSS 0.5%CVE-2026-8914HIGHCommand injection in Profile change functionEPSS 0.5%CVE-2026-45406CRITICALDokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through evalEPSS 0.5%