CVE-2026-80351 is a critical eval injection vulnerability in Apache Camel K that allows tenant-controlled Maven repository content to influence code execution within the operator pod. This improper neutralization of directives in dynamically evaluated Maven configuration can lead to arbitrary code execution with operator privileges. Versions from 2.0.0 up to but not including 2.9.3, and from 2.10.1 up to but not including 2.10.2 are affected. The issue is fixed in versions 2.9.3, 2.10.2, and 2.11.0.
Adobe ColdFusion 2025 is affected by a critical vulnerability (CVE-2026-48273) involving improper neutralization of directives in dynamically evaluated code, also known as 'Eval Injection'. This flaw allows a low-privileged attacker to execute arbitrary code without requiring user interaction. The vulnerability impacts confidentiality, integrity, and availability, with a high CVSS score of 9.9. The scope of the vulnerability is changed, indicating that the impact extends beyond the vulnerable component. No patch information is provided in the input data.
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-65643 is an eval injection vulnerability in WebPros cPanel versions 11.138.0.0 and earlier. It allows remote authenticated users to execute arbitrary code with root privileges. The vulnerability affects multiple version ranges prior to fixed releases. It has a high severity score of 8.7 and has been publicly disclosed with no known exploits in the wild.
IBM Langflow OSS versions 1.0.0 through 1.11.1 contain a critical vulnerability that allows an authenticated attacker to execute arbitrary operating system commands on the server. This occurs by saving a flow with a specially crafted type field and triggering a build of a wrapper flow referencing it. The vulnerability bypasses the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy, enabling privilege escalation from an authenticated flow user to OS-level command execution under the server process identity.
CVE-2026-54569 is a critical vulnerability in senaite.core versions 2.0.0 through 2.6.0 that allows unauthenticated remote code execution via the JSON API. The flaw arises from missing authorization checks on state-changing API routes combined with unsafe use of eval() on user-supplied input before permission checks. An attacker can execute arbitrary Python code in the Zope worker process, potentially exposing or modifying laboratory data, files, and accounts, and disrupting service.
CVE-2026-75062 is a critical vulnerability in Google langfun prior to version 0.1.2. It involves improper neutralization of directives in dynamically evaluated code within the default lf.query Python protocol. This flaw allows remote unauthenticated attackers to execute arbitrary Python code by crafting prompt inputs that cause the model to generate executable Python expressions evaluated without sandboxing.
A high-severity vulnerability (CVE-2026-78136) exists in chirpmyradio CHIRP before commit 39178db, where crafted CSV data can trigger an eval injection flaw in the _clean_tmode function within drivers/kenwood_itm.py. This improper neutralization of directives in dynamically evaluated code (CWE-95) can lead to full compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently available.
CVE-2026-61539 is a critical remote code execution vulnerability in xorbitsai inference API versions 2.5.0 and earlier. The vulnerability arises from improper neutralization of directives in dynamically evaluated code (eval injection) where attacker-controlled input is passed to Python's eval() function. An unauthenticated attacker can exploit this by crafting malicious prompts to execute arbitrary commands on the Xinference server. The issue is fixed in version 2.7.0.
CVE-2026-77810 is a critical vulnerability in the AWS Athena Federated Query Neptune Connector that allows a user with access to Neptune through Athena Federated Query to gain access to properties in the Lambda function supplying the compute for the connector. This issue is due to improper neutralization of directives in dynamically evaluated code (eval injection).
Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a single quote in a schema property name is emitted into single-quoted object keys in generated MSW mock factories without safe encoding. This permits attacker-controlled JavaScript to be evaluated when the generated mock factory is called by tests or an MSW handler, resulting in code execution in the developer, CI, test, or application environment. The affected code is packages/core/src/getters/keys.ts function getKey and MSW mock generation. This issue is fixed in version 8.21.0.
CVE-2026-71865 is a critical code injection vulnerability in orval-labs' orval tool that generates type-safe JavaScript clients from OpenAPI and Swagger specifications. Versions prior to 8.21.0 improperly handle double quotes in query parameter names, embedding them unsafely into generated zod validation schemas. This flaw allows attacker-controlled JavaScript to be executed when the generated schema module is imported, leading to code execution in developer, CI, test, or application environments. The issue is fixed in version 8.21.0.
CVE-2026-71864 is a critical code injection vulnerability in orval-labs orval prior to version 8.21.0. The issue arises because a double quote in a header parameter name is not safely encoded when generating the request-validation zod schema, allowing attacker-controlled JavaScript code to be executed when the generated module is imported. This can lead to code execution in developer, CI, test, or application environments. The vulnerability is fixed in version 8.21.0.
Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. From version 8.19.0 until 8.21.0, a double quote in a schema property name is emitted into the generated zod.object({...}) schema without safe encoding. This permits attacker-controlled JavaScript to be evaluated when the generated zod schema module is imported, resulting in code execution in the developer, CI, test, or application environment. The affected code is packages/zod/src/index.ts and zod object-key generation. This issue is fixed in version 8.21.0.
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename.
load_lexicon builds the catalog path by appending `Messages/$lang.po` to the directory holding Localizer.pm, where $lang is the language attribute, with no check that it names a bare locale tag. A value holding `../` segments walks out of the message directory, so any readable path with a `.po` suffix is loaded. While parsing the catalog, extract_header_msgstr takes the `Plural-Forms:` header, prefixes `$` to the bare words nplurals, plural and n, and passes the rest verbatim into a string that is evaluated: the nplurals form evaluates the header expression immediately, and the plural_code form compiles it into a subroutine whose body runs when a plural message is localized. A header of `nplurals=2; plural=(system('...'),0);` therefore runs that command as the catalog loads. The evaluation inherits strict, so an expression that assigns to an undeclared variable fails to compile, while one built from calls alone does not.
An application that sets the language attribute from request data, an Accept-Language header or a locale parameter, and an attacker who can place a file with a `.po` suffix and chosen contents at a readable path, together give code execution as the application user. The message expansion path is not affected: expand_named substitutes only the placeholder names the caller supplies, and _mangle_value returns the value unchanged.
calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template() call whose formatter does not inherit allow_python_templates=False, allowing a nested python: template to reach compile_python_template and execute arbitrary Python code when the file is opened or imported. This issue is fixed in version 9.12.0.
Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another function, enabling arbitrary JavaScript code execution. This issue is fixed in version 10.5.0.