CWE-94 对生成代码的控制不恰当(代码注入) 类弱点 1295 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | 发布日期 |
|---|---|---|---|---|
| CVE-2024-1490 | WAGO PLC 代码注入漏洞 — CC100 (0751-9x01) | 7.2 | High | 2026-04-09 |
| CVE-2026-5848 | JimuReport 代码注入漏洞 — JimuReport | 4.7 | Medium | 2026-04-09 |
| CVE-2026-1516 | GitLab Enterprise Edition（EE） 代码注入漏洞 — GitLab | 5.7 | Medium | 2026-04-08 |
| CVE-2026-39891 | PraisonAI 代码注入漏洞 — PraisonAI | 8.8 | High | 2026-04-08 |
| CVE-2026-39881 | Vim 代码注入漏洞 — vim | 5.0 | Medium | 2026-04-08 |
| CVE-2026-34724 | Zammad 安全漏洞 — zammad | 7.2AI | HighAI | 2026-04-08 |
| CVE-2026-25776 | Six Apart Movable Type 代码注入漏洞 — Movable Type | 8.8AI | HighAI | 2026-04-08 |
| CVE-2026-5739 | PowerJob 代码注入漏洞 — PowerJob | 7.3 | High | 2026-04-07 |
| CVE-2026-39337 | ChurchCRM 代码注入漏洞 — CRM | 10.0 | Critical | 2026-04-07 |
| CVE-2026-35197 | dye 代码注入漏洞 — dye | 6.6 | Medium | 2026-04-06 |
| CVE-2026-35178 | Workbench 代码注入漏洞 — forceworkbench | 7.2AI | HighAI | 2026-04-06 |
| CVE-2026-35171 | Kedro 代码问题漏洞 — kedro | 9.8 | Critical | 2026-04-06 |
| CVE-2026-26026 | GLPI 安全漏洞 — glpi | 9.1 | Critical | 2026-04-06 |
| CVE-2026-5631 | GPT Researcher 代码注入漏洞 — gpt-researcher | 7.3 | High | 2026-04-06 |
| CVE-2026-5594 | PremSQL 代码注入漏洞 — premsql | 6.3 | Medium | 2026-04-05 |
| CVE-2026-5584 | AgenticSeek 代码注入漏洞 — agenticSeek | 7.3 | High | 2026-04-05 |
| CVE-2026-5562 | kafka-ui 代码注入漏洞 — kafka-ui | 7.3 | High | 2026-04-05 |
| CVE-2026-5556 | OSS Weekend 代码注入漏洞 — pi-mono | 6.3 | Medium | 2026-04-05 |
| CVE-2026-3309 | WordPress plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 代码注入漏洞 — Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 6.5 | Medium | 2026-04-04 |
| CVE-2026-34725 | DbGate 代码注入漏洞 — dbgate | 8.3 | High | 2026-04-02 |
| CVE-2026-35093 | libinput 代码注入漏洞 — Red Hat Enterprise Linux 10 | 8.8 | High | 2026-04-01 |
| CVE-2026-29014 | MetInfo CMS 安全漏洞 — MetInfo CMS | 9.8 | Critical | 2026-04-01 |
| CVE-2026-35056 | Xenforo 安全漏洞 — XenForo | 7.2 | High | 2026-04-01 |
| CVE-2025-71281 | Xenforo 代码注入漏洞 — XenForo | 8.8 | High | 2026-04-01 |
| CVE-2026-4800 | lodash 安全漏洞 — lodash | 8.1 | High | 2026-03-31 |
| CVE-2026-34060 | Ruby LSP 代码注入漏洞 — ruby-lsp | 8.8AI | HighAI | 2026-03-31 |
| CVE-2026-3300 | WordPress plugin Everest Forms Pro 代码注入漏洞 — Everest Forms Pro | 9.8 | Critical | 2026-03-31 |
| CVE-2026-4257 | WordPress plugin Contact Form by Supsystic 代码注入漏洞 — Contact Form by Supsystic | 9.8 | Critical | 2026-03-30 |
| CVE-2026-28505 | Tautulli 安全漏洞 — Tautulli | 9.8 | - | 2026-03-30 |
| CVE-2026-5011 | elecV2P 代码注入漏洞 — elecV2P | 6.3 | Medium | 2026-03-28 |
CWE-94（对生成代码的控制不恰当(代码注入)） 是常见的弱点类别，本平台收录该类弱点关联的 1295 条 CVE 漏洞。