PT-2026-113038

Name of the Vulnerable Software and Affected Versions Windows Assigned Access affected versions not specified Description Improper control of code generation, known as code injection, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there i...

PT-2026-113363

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2023 and 2025 Description An improper control of code generation leads to a code injection issue that allows unauthenticated remote attackers to execute arbitrary code on the server. This process occurs in the context...

CVE-2026-106621: Improper Control of Generation of Code

ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...

PT-2026-113427

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw can be exploited...

CVE-2026-106624: Improper Control of Generation of Code

ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...

CVE-2026-108961: Improper Control of Generation of Code

A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...

CVE-2026-108962: Improper Control of Generation of Code

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

CVE-2026-108943: Improper Control of Generation of Code

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108957: Improper Control of Generation of Code

A security flaw has been discovered in TinyLLaVA TinyLLaVAFactory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function loadtextconfig of the file tinyllava/model/configurationtinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument...

Microsoft Visual Studio: CVE-2026-102870: ASP.NET Core Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-103572: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-102863: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-102870: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-105903: Improper Control of Generation of Code

ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue doe...

PT-2026-111275

Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...

PT-2026-111948

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to elevate privileges over a network. Recommendations At the moment,...

PT-2026-111954

Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.Components.WebAssembly.Server versions 10.0.0 through 10.0.12 Microsoft.AspNetCore.Components.WebAssembly.Server versions 11.0.0-preview.1 through 11.0.0-rc.1 Description Improper control of code generation in ASP.NET Core...

UBUNTU-CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96220: Windows Assigned Access Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...