CVE-2026-101000 to CVE-2026-101999

94 CVEs with public proof-of-concept exploits.

• CVE-2026-1010001 PoCNetcore NBR100V2 ACL unauthenticated.json uci.apply authorization
• CVE-2026-1010011 PoCNetcore NBR200V2 Web Management network_tools eval os command injection
• CVE-2026-1010021 PoCNetcore NBR200V2 Tools Ping network_tools system os command injection
• CVE-2026-1010051 PoCOctober CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery
• CVE-2026-1010071 PoCaaPanel BaoTa Database Backup database.py InputSql os command injection
• CVE-2026-1010081 PoCaaPanel BaoTa File Merge files.py merge_split_file command injection
• CVE-2026-1010091 PoCaaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection
• CVE-2026-1010101 PoCaaPanel BaoTa data.py getData sql injection
• CVE-2026-1010111 PoCaaPanel BaoTa Domain domainMod.py get_domain_status sql injection
• CVE-2026-1010121 PoCmathurvishal CloudClassroom-PHP-Project makeresult.php sql injection
• CVE-2026-1010141 PoCTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one
• CVE-2026-1010151 PoCTrusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input
• CVE-2026-1010161 PoCTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition
• CVE-2026-1010171 PoCTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition
• CVE-2026-1010181 PoCdayrui XunruiCMS Group Editing Home.php group_all_edit sql injection
• CVE-2026-1010351 PoCaligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception
• CVE-2026-1010361 PoCFLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal
• CVE-2026-1010371 PoCFAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow
• CVE-2026-1010381 PoCFAST FAC1200R MmtAtePrase stack-based overflow
• CVE-2026-1010391 PoCFAST FAC1900R devdiscover Service copy_msg_element stack-based overflow
• CVE-2026-1010401 PoCRicoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
• CVE-2026-1010521 PoCrefly-ai refly JWT Token app.config.ts hard-coded credentials
• CVE-2026-1010541 PoCThinkware U3000 TCP Service wpa_supplicant.conf get_file access control
• CVE-2026-1010551 PoCThinkware U3000 TCP Service GET_STATUS information disclosure
• CVE-2026-1010661 PoCdbgate Archive Link Creation archive.js createLink path traversal
• CVE-2026-1010671 PoCdbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal
• CVE-2026-1010681 PoCdbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal
• CVE-2026-1010691 PoCdbgate Export databaseConnections.js exportModelSql path traversal
• CVE-2026-1010701 PoCdbgate Files Endpoint runners.js files path traversal
• CVE-2026-1010711 PoCAcrel Electric Unet Web Service Upload Endpoint upload unrestricted upload
• CVE-2026-1010721 PoCNetcore NR289-GE CGI ap_ip.cgi system os command injection
• CVE-2026-1010731 PoCNetcore NR289-GE CGI Dispatcher boa improper authentication
• CVE-2026-1010741 PoCNetcore NR289-GE Authentication boa password-check stack-based overflow
• CVE-2026-1010751 PoCNetcore NR289-GE Location Time location_time.cgi system os command injection
• CVE-2026-1010761 PoCNetcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
• CVE-2026-1010771 PoCNetcore NR289-GE boa_temp process_request missing authentication
• CVE-2026-1010781 PoCdeepseek-ai deepseek-harness Landlock Backend profiles.ts isolation
• CVE-2026-1010791 PoCagentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision
• CVE-2026-1010801 PoCTencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal
• CVE-2026-1010811 PoCD-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow
• CVE-2026-1011051 PoCcode-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection
• CVE-2026-1011081 PoCJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8
• CVE-2026-1011101 PoCJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6
• CVE-2026-1011321 PoCDeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal
• CVE-2026-1011391 PoCWebkul Bagisto Invoice Mass Status Update state authorization
• CVE-2026-1011411 PoCEleveo Call Recording Software Play Audio audio.jsp cross site scripting
• CVE-2026-1011421 PoCEleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal
• CVE-2026-1011431 PoCEleveo Quality Management QMBODownload information disclosure
• CVE-2026-1011441 PoCEleveo Call Recording Software Query Builder searchAction.do access control
• CVE-2026-1011451 PoCEleveo Call Recording Software User Management userAddAction.do ldap injection
• CVE-2026-1011461 PoCEleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure
• CVE-2026-1011471 PoCFeatured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRF
• CVE-2026-1011481 PoCBackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
• CVE-2026-1011591 PoCWP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submission
• CVE-2026-1011602 PoCsWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating
• CVE-2026-1011612 PoCsWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
• CVE-2026-1011622 PoCsWP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings
• CVE-2026-1011871 PoCZiroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection
• CVE-2026-1011881 PoCNetcore POWER13 ubus routerd.passwd_set password recovery
• CVE-2026-1012601 PoCZiroom ZHOME A0101 firstLogin command injection
• CVE-2026-1012611 PoCZiroom ZHOME A0101 firstSetup_wifi command injection
• CVE-2026-1012621 PoCZiroom ZHOME A0101 set_online_client command injection
• CVE-2026-1012631 PoCZiroom ZHOME A0101 set_online_client command injection
• CVE-2026-1012641 PoCZiroom ZHOME A0101 set_passwd command injection
• CVE-2026-1012771 PoCTrusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted source
• CVE-2026-1012781 PoCTrusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation
• CVE-2026-1012791 PoCTrusted Domain Project OpenDMARC opendmarc_policy.c integer overflow
• CVE-2026-1012801 PoCTrusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing
• CVE-2026-1012811 PoCTrusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication
• CVE-2026-1013011 PoCWPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode Bypass
• CVE-2026-1013541 PoCFAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow
• CVE-2026-1018581 PoCRaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection
• CVE-2026-1018591 PoCRaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection
• CVE-2026-1018601 PoCRaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
• CVE-2026-1018781 PoCBitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation
• CVE-2026-1018941 PoC@xhmikosr/decompress: Path traversal via symlink chain
• CVE-2026-1018951 PoCAngular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE
• CVE-2026-1018961 PoCAngular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
• CVE-2026-1018981 PoCAxios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls
• CVE-2026-1018991 PoCAxios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges
• CVE-2026-1019001 PoCAxios: Fetch Adapter Header Injection via Inherited FormData getHeaders
• CVE-2026-1019011 PoCAxios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization
• CVE-2026-1019021 PoCAxios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
• CVE-2026-1019031 PoCAxios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)
• CVE-2026-1019041 PoCAxios: Header Injection via Inherited headers After Minimal Interceptor
• CVE-2026-1019051 PoCAxios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection
• CVE-2026-1019061 PoCAxios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location
• CVE-2026-1019071 PoCAxios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF
• CVE-2026-1019081 PoCAxios: Prototype pollution gadget in fetch adapter can alter outbound requests
• CVE-2026-1019091 PoCAxios: Prototype Pollution Gadget in axios toFormData Options
• CVE-2026-1019101 PoCip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
• CVE-2026-1019111 PoCip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or…
• CVE-2026-1019121 PoCip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an…
• CVE-2026-1019131 PoCip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts