Base de CVEs

CVE-2026-35255 Média · 6.6 CWE-94 06/05/2026

Code Injection em Oracle Cloud Native Environment Command Line Interface

Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line Interface product via a malicious environment variable. Successful attacks of this vulnerability can result in Oracle Cloud Native Environment Command Line Interface allowing users to execute arbitrary code.

CVE-2026-7841 Alta · 8.8 CWE-94 06/05/2026

GV-ASWeb Remote Code Execution (RCE) vulnerability

A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the frontend restrictions.

CVE-2026-38431 Crítica · 9.8 CWE-94 05/05/2026

Code Injection em Frappe Erpnext

ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI). An attacker with permission to create or edit email templates can inject template expressions that are executed on the server when the template is rendered.

CVE-2023-54345 Alta · 8.8 CWE-94 05/05/2026

Frappe Framework ERPNext 13.4.0 Remote Code Execution

Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame introspection. Attackers can create a server script via the /app/server-script endpoint and access the gi_frame attribute to traverse the call stack and invoke os.popen to execute system commands.

CVE-2026-42238 Crítica · 9.8 CWE-94 04/05/2026

Unauthenticated Remote Code Execution via Backup Restore in nginx-ui

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint (POST /api/restore) that is completely unauthenticated during the first 10 minutes after process startup on any fresh installation. An unauthenticated remote attacker can upload a crafted backup archive that overwrites the application's configuration file (app.ini) and SQLite database. Because the attacker controls the restored app.ini, they can inject an arbitrary OS command into the TestConfigCmd setting. After the application automatically restarts to apply the restored config, a single follow-up request triggers that command as the user running nginx-ui — typically root in Docker deployments. This issue has been patched in version 2.3.8.

CVE-2026-42234 Alta · 8.8 CWE-94 04/05/2026

n8n: Python Task Runner Sandbox Escape

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This issue only affects instances where the Python Task Runner is enabled. This issue has been patched in versions 1.123.32, 2.17.4, and 2.18.1.

CVE-2026-26332 Crítica · 10.0 CWE-94 04/05/2026

vm2: fuga de sandbox (escape de isolamento)

vm2 é um sandbox/vm de código aberto para Node.js. Antes da versão 3.11.0, SuppressedError permite que atacantes escapem do sandbox e executem código arbitrário. Este problema foi corrigido na versão 3.11.0.

CVE-2026-24781 Crítica · 9.8 CWE-94 04/05/2026

vm2 (Node.js): escape do sandbox via inspect

vm2 é uma máquina virtual/sandbox de código aberto para Node.js. Antes da versão 3.11.0, o VM2 sofre de uma vulnerabilidade de quebra de sandbox por meio da função inspect. Isso permite que atacantes escrevam código capaz de escapar da sandbox do VM2 e executar comandos arbitrários no sistema hospedeiro. Este problema foi corrigido na versão 3.11.0.

CVE-2026-24120 Crítica · 9.8 CWE-94 04/05/2026

vm2 para Node.js: Escape do Sandbox via Promise Species

vm2 é um sandbox/máquina virtual de código aberto para Node.js. Antes da versão 3.10.5, a correção para o CVE-2023-37466 é insuficiente e pode ser contornada, permitindo que atacantes escrevam código capaz de escapar do sandbox VM2 e executar comandos arbitrários no sistema hospedeiro. Este problema foi corrigido na versão 3.10.5.

CVE-2026-24118 Crítica · 9.8 CWE-94 04/05/2026

Vulnerabilidade de escape de sandbox no vm2 para Node.js

vm2 é um sandbox/VM de código aberto para Node.js. Antes da versão 3.11.0, o VM2 sofre de uma vulnerabilidade de quebra de sandbox. Isso permite que atacantes escrevam código que pode escapar do sandbox do VM2 e executar comandos arbitrários no sistema hospedeiro. Este problema foi corrigido na versão 3.11.0.

CVE-2026-40563 Alta · 8.1 CWE-94 04/05/2026

Apache Atlas: Script injection allows access to unintended data

Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data Affect Version: This issue affects Apache Atlas: from 0.8 through 2.4.0. For the affect version >= 2.0, vulnerability is only when Atlas is deployed with below non-default configuration. atlas.dsl.executor.traversal=false Mitigation: Users are recommended to upgrade to version 2.5.0, which fixes the issue.

CVE-2026-3120 Alta · 7.2 CWE-94 04/05/2026

RCE in Profelis Informatics' SambaBox

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3.

CVE-2026-2052 Alta · 8.8 CWE-94 02/05/2026

Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval() on user-supplied Display Logic expressions with an insufficient blocklist/allowlist that can be bypassed using array_map with string concatenation, combined with a lack of authorization enforcement on the extended_widget_opts_block attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. The vulnerability was partially patched in version 4.2.0.

CVE-2026-42994 Crítica · 9.8 CWE-94 01/05/2026

Code Injection em Bitwarden Cli

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.

CVE-2026-6543 Alta · 8.8 CWE-94 30/04/2026

Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.

CVE-2026-36340 Alta · 8.1 CWE-94 30/04/2026

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute…

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function

CVE-2025-14576 Alta · 7.8 CWE-94 30/04/2026

Possible QML code injection in VectorImage component

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.

CVE-2026-34965 Alta · 8.8 CWE-94 29/04/2026

Cockpit CMS Authenticated Remote Code Execution via Collections

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules parameters. Attackers can inject malicious PHP code through rule parameters which is written directly to server-side PHP files and executed via include() to achieve arbitrary command execution on the underlying server.

CVE-2026-7466 Alta · 8.8 CWE-94 29/04/2026

AgentFlow Arbitrary Python Pipeline Execution via pipeline_path

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce requests to the local AgentFlow API to load and execute existing Python pipeline files on disk, resulting in code execution in the context of the user running AgentFlow.

CVE-2026-38992 Crítica · 9.8 CWE-94 29/04/2026

Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter…

Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability allows an attacker to run system commands on the underlying infrastructure via the MongoLite $func operator.

CVE-2026-27760 Alta · 8.1 Exploit público CWE-94 28/04/2026

OpenCATS PHP Code Injection via installer AJAX endpoint

OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete.

CVE-2026-40967 Alta · 8.6 CWE-94 28/04/2026

Code Injection em Vmware Spring Ai

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

CVE-2026-7191 Alta · 7.2 CWE-94 27/04/2026

Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Content Designer interface, which bypasses the intended expression sandbox through JavaScript prototype manipulation. This may grant direct access to backend resources (Lambda environment variables, OpenSearch indices, S3 objects, DynamoDB tables) that are not exposed through normal administrative interfaces. We recommend you upgrade to version 7.3.0 or above.

CVE-2026-6951 Crítica · 9.8 CWE-94 25/04/2026

Code Injection em Simple-git Project Simple-git

Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221) that blocks the -c option but not the equivalent --config form. If untrusted input can reach the options argument passed to simple-git, an attacker may still achieve remote code execution by enabling protocol.ext.allow=always and using an ext:: clone source.

CVE-2026-41414 Alta · 7.4 CWE-94 24/04/2026

Skim: Arbitrary code execution via pull_request_target fork checkout in pr.yml

Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it via cargo run, with access to SKIM_RS_BOT_PRIVATE_KEY and GITHUB_TOKEN (contents:write). No gates prevent exploitation - any GitHub user can trigger this by opening a pull request from a fork. This vulnerability is fixed with commit bf63404ad51985b00ed304690ba9d477860a5a75.