On this page

CWE-913: Improper Control of Dynamically-Managed Code Resources

Weakness Summary

The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.

  • Canonical source: MITRE CWE-913 (opens in a new tab)
  • Published Atomicorp CVE observations: 5
  • Distinct affected products in those observations: 5
  • Active Atomicorp rules associated with this weakness: 15

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2026-53753Crawl4AI <= 0.8.6 - Remote Code Executioncrawl4aiAttack Blocked by Atomicorp350147 , 360151 , 380026 , 393655
CVE-2026-34156NocoBase - VM Sandbox Escape to Remote Code ExecutionnocobaseAttack Blocked by Atomicorp344370 , 345240 , 360151
CVE-2020-15568TerraMaster TOS <.1.29 - Remote Code ExecutiontosAttack Blocked by Atomicorp340023 , 344360 , 347009
CVE-2025-68613n8n - Remote Code Execution via Expression Injectionn8nAttack Blocked by Atomicorp340130 , 344361 , 344363 , 344364 , 345240 , 380026
CVE-2026-48105Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide patharcAttack Blocked by Atomicorp340007 , 344360 , 390709

Associated Atomicorp WAF Rules

RuleStatusBehavior
340007Activedisruptive (deny)
340023Activedisruptive (deny)
340130Activedisruptive (deny)
344360Activedisruptive (deny)
344361Activedisruptive (deny)
344363Activedisruptive (deny)
344364Activedisruptive (deny)
344370Activedisruptive (deny)
345240Activedisruptive (deny)
347009Activedisruptive (deny)
350147Activedisruptive (deny)
360151Activedisruptive (deny)
380026Activedisruptive (deny)
390709Activedisruptive (deny)
393655Activedisruptive (deny)