CWE-74 - Injection

Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation

Critical Command Injection Vulnerability in Cobham SATCOM Routers

Critical Code Injection Vulnerability in openapi-typescript-codegen Disclosed

Multiple Vulnerabilities in IBM Financial Transaction Manager Exposed

CVE-2026-81526: MongoDB Rust Driver Vulnerability Exposes Data to Unauthorized Writes

Code Injection Duo — 2 CVEs, Peak CVSS 9.8 in openapi-typescript-codegen and Floci Velocity ThreatAft — Cybersecurity Intelligence / 11h Impact: CVE-108551 allows JavaScript injection into generated TypeScript clients via unescaped Handlebars interpolation — supply-chain compromise of build pipelines. If your CI/CD pipeline ingests OpenAPI specs from vendors, partners, or public repos, an attacker controlling that spec achieves code execution inside your build environment.