Common Weakness Enumeration
CWE-114 Process Control
Description
Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-114 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-46pr-c5wc-xffx | CVE-2026-92939 | CRITICAL |
vm2 crypto builtin loads attacker native code through setEngine |
2026-10-01 | |
| GHSA-6jgm-4w45-vh8j | - | CRITICAL |
Duplicate Advisory: vm2 crypto builtin loads attacker native code through setEngine |
2026-10-01 |