CVE-2026-103000 to CVE-2026-103999

64 CVEs with public proof-of-concept exploits.

• CVE-2026-1030011 PoCPyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
• CVE-2026-1030301 PoCDio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`
• CVE-2026-1031131 PoCOS4ED openSIS-Classic General Information Tab Student.php save action sql injection
• CVE-2026-1031141 PoCOS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
• CVE-2026-1031151 PoCOS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
• CVE-2026-1031161 PoCOS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
• CVE-2026-1031171 PoCOS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
• CVE-2026-1032261 PoCArtifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow
• CVE-2026-1032291 PoCAdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection
• CVE-2026-1032301 PoCAdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli_query sql injection
• CVE-2026-1032311 PoCAdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli_query sql injection
• CVE-2026-1032321 PoCAdithyaYelloju Restaurant-Management-System table_booking.php mysqli_query sql injection
• CVE-2026-1032331 PoCAdithyaYelloju Restaurant-Management-System Admin Area admin authorization
• CVE-2026-1032411 PoCvllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service
• CVE-2026-1032931 PoCMPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import
• CVE-2026-1033041 PoCeaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update
• CVE-2026-1033051 PoCPrenotazioni <= 1.7.5 - Unauthenticated Stored XSS via Settings Update
• CVE-2026-1033071 PoCWalletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook
• CVE-2026-1033081 PoCVisma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint
• CVE-2026-1033091 PoCGPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage
• CVE-2026-1033231 PoCIntegration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Unauthenticated Action Scheduler Queue Disclosure
• CVE-2026-1033241 PoCCardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret
• CVE-2026-1033291 PoCSuper Payments < 1.43.1 - Unauthenticated Payment Confirmation Forgery via Webhook Signature
• CVE-2026-1033551 PoCWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
• CVE-2026-1033761 PoCPeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check
• CVE-2026-1033781 PoCGeliver Akıllı Kargo Pazaryeri 3.0.0 - 3.1.0 - Unauthenticated API Key Disclosure via Public Log File
• CVE-2026-1033871 PoCgarycourt uri-js Mailto Header mailto.ts URI.parse uncaught exception
• CVE-2026-1034371 PoCReadingLists imported metadata permits JavaScript URL XSS
• CVE-2026-1034401 PoCpagetriagelist discloses suppressed reviewer usernames
• CVE-2026-1034411 PoCUnauthenticated arbitrary file deletion through Wikibase serialized entity parsing
• CVE-2026-1034421 PoCMergeAccount PHP object injection via session-key substitution
• CVE-2026-1034451 PoCStored XSS through PageForms #autoedit redirect links
• CVE-2026-1034461 PoCWikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments
• CVE-2026-1035141 PoCWP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
• CVE-2026-1035171 PoCAirwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook
• CVE-2026-1035331 PoCDavid-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal
• CVE-2026-1035341 PoCDavid-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control
• CVE-2026-1035361 PoCZongXR Supermarket save Endpoint OrderController.java OrderController.addOrder missing authentication
• CVE-2026-1035381 PoCZongXR SuperMarket Order Deletion Endpoint OrderController.java OrderController.deleteOrder missing authentication
• CVE-2026-1035391 PoCZongXR SuperMarket Instant Buy InstantBuyController.java startBuy missing authentication
• CVE-2026-1035401 PoCformtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine
• CVE-2026-1035411 PoCformtools.org Form Tools Ajax actions.php uploadFile unrestricted upload
• CVE-2026-1035421 PoCformtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgery
• CVE-2026-1035431 PoCitsourcecode Leave Management System controller.php sql injection
• CVE-2026-1035441 PoCdatadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong session
• CVE-2026-1035721 PoCVisual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
• CVE-2026-1035841 PoCattacker-controlled javascript license URL via XSS
• CVE-2026-1035851 PoCattacker-controlled javascript license URL via XSS
• CVE-2026-1036461 PoCUltimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter
• CVE-2026-1036481 PoCImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader
• CVE-2026-1036811 PoCFrontend Dashboard < 3.0.0 - Subscriber+ Profile and Post Field Deletion via fed_user_profile_delete
• CVE-2026-1036861 PoCrhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting
• CVE-2026-1036871 PoCrhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
• CVE-2026-1036902 PoCsitsourcecode Leave Management System controller.php sql injection
• CVE-2026-1036921 PoCFrontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call
• CVE-2026-1036941 PoCMobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin
• CVE-2026-1036951 PoCMobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter
• CVE-2026-1036961 PoCMobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter
• CVE-2026-1037661 PoCClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
• CVE-2026-1038891 PoC3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter
• CVE-2026-1039221 PoCCapacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
• CVE-2026-1039291 PoCmise permits untrusted local configuration to override default shell arguments
• CVE-2026-1039561 PoCMissing authentication for critical function in Loom for AWS
• CVE-2026-1039751 PoCAppium: Symlink based Zip Slip in @appium/support ZIP extraction