On this page
CWE-913: Improper Control of Dynamically-Managed Code Resources
Weakness Summary
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
- Canonical source: MITRE CWE-913 (opens in a new tab)
- Published Atomicorp CVE observations: 5
- Distinct affected products in those observations: 5
- Active Atomicorp rules associated with this weakness: 15
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2026-53753 | Crawl4AI <= 0.8.6 - Remote Code Execution | crawl4ai | Attack Blocked by Atomicorp | 350147 , 360151 , 380026 , 393655 |
| CVE-2026-34156 | NocoBase - VM Sandbox Escape to Remote Code Execution | nocobase | Attack Blocked by Atomicorp | 344370 , 345240 , 360151 |
| CVE-2020-15568 | TerraMaster TOS <.1.29 - Remote Code Execution | tos | Attack Blocked by Atomicorp | 340023 , 344360 , 347009 |
| CVE-2025-68613 | n8n - Remote Code Execution via Expression Injection | n8n | Attack Blocked by Atomicorp | 340130 , 344361 , 344363 , 344364 , 345240 , 380026 |
| CVE-2026-48105 | Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path | arc | Attack Blocked by Atomicorp | 340007 , 344360 , 390709 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 340007 | Active | disruptive (deny) |
| 340023 | Active | disruptive (deny) |
| 340130 | Active | disruptive (deny) |
| 344360 | Active | disruptive (deny) |
| 344361 | Active | disruptive (deny) |
| 344363 | Active | disruptive (deny) |
| 344364 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 345240 | Active | disruptive (deny) |
| 347009 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 360151 | Active | disruptive (deny) |
| 380026 | Active | disruptive (deny) |
| 390709 | Active | disruptive (deny) |
| 393655 | Active | disruptive (deny) |