Falhas do tipo CWE-95

224 resultados

Injeção em Código Avaliado Dinamicamente

Ocorre quando a aplicação passa dados não validados para funções que executam código dinamicamente (como eval(), exec() ou similar), permitindo que um atacante injete e execute comandos arbitrários. O risco é crítico porque a execução é feita com os mesmos privilégios da aplicação, podendo resultar em comprometimento total do sistema.

Exemplo

Um formulário web que avalia expressões matemáticas usando eval(input_usuario) sem sanitização. Um atacante envia 'import os; os.system("rm -rf /")' em vez de uma expressão legítima, e o servidor executa o comando malicioso diretamente.

Como mitigar

Nunca use eval() ou funções equivalentes com entrada do usuário. Use parsers específicos do domínio (para expressões matemáticas, por exemplo) ou whitelist rigorosa de caracteres permitidos. Se absolutamente necessário avaliar código, isole a execução em um sandbox com permissões mínimas e valide/sanitize agressivamente antes de qualquer avaliação.

CVE-2026-4837MEDIUMEval Injection in Rapid7 Insight AgentEPSS 0.4%CVE-2026-40316HIGHOWASP BLT has RCE in Github Actions via untrusted Django model execution in workflowEPSS 0.4%CVE-2026-24474MEDIUMDioxus Components has JavaScript injection via user-supplied IDsEPSS 0.4%CVE-2026-5971MEDIUMFoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injectionEPSS 0.4%CVE-2026-27702CRITICALBudibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)EPSS 0.4%CVE-2026-78550MEDIUMImproper Input Handling in Okta Access Gateway Management Console Exception HandlerEPSS 0.4%CVE-2024-45858HIGHAn arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the wayEPSS 0.4%CVE-2025-32435LOWHydra no restricted eval after nix-eval-jobs migrationEPSS 0.4%CVE-2024-27320HIGHAn arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classifiEPSS 0.4%CVE-2026-75062CRITICALEval Injection in google/langfun via default lf.query protocolEPSS 0.4%CVE-2026-76974MEDIUMInformation Disclosure vulnerability in SAP Fiori LaunchpadEPSS 0.3%CVE-2024-27321HIGHAn arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabEPSS 0.3%CVE-2026-44344MEDIUMChamilo LMS: Conditional PHP execution through vendored QuickForm evalEPSS 0.3%CVE-2026-63350CRITICALAffected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social enEPSS 0.3%CVE-2026-33618HIGHChamilo LMS Affected by Remote Code Execution via eval() in Platform SettingsEPSS 0.3%CVE-2023-7245HIGHThe nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to EPSS 0.3%CVE-2026-100840HIGHMONAI through 1.6.0 Remote Code Execution via bundle configurationEPSS 0.3%CVE-2025-65530HIGHAn eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary filesEPSS 0.3%CVE-2025-6101MEDIUMletta-ai letta interface.py function_message eval injectionEPSS 0.3%CVE-2026-85486HIGHBrocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a EPSS 0.3%