CVE-2026-108000 to CVE-2026-108999

241 CVEs with public proof-of-concept exploits.

• CVE-2026-1080641 PoCWP Encryption < 7.8.8.2 - Unauthenticated Certificate Private Key and ACME Order Replacement via wple_auto_handler
• CVE-2026-1080661 PoCWP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR
• CVE-2026-1080691 PoCSunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()
• CVE-2026-1081102 PoCsMOVO through 0.2.3 Authorization Bypass via Document Endpoints
• CVE-2026-1081112 PoCsruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search
• CVE-2026-1081122 PoCsruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint
• CVE-2026-1081141 PoCStrapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions
• CVE-2026-1081151 PoCKortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses
• CVE-2026-1081261 PoCtemporal-proxy payload decryption is not bound to the request namespace
• CVE-2026-1081582 PoCsplugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert
• CVE-2026-1081641 PoCOpen Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route
• CVE-2026-1081651 PoCImmich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata
• CVE-2026-1082591 PoCTina: Code injection via unescaped Git branch name in generated client source
• CVE-2026-1082601 PoC@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
• CVE-2026-1082611 PoCTinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
• CVE-2026-1085211 PoCStudio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery
• CVE-2026-1085221 PoCStudio-Saelix Sencho Login Endpoint login improper authentication
• CVE-2026-1085231 PoCStudio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery
• CVE-2026-1085381 PoCGPAC MP4Box os_thread.c gf_mx_v use after free
• CVE-2026-1085391 PoCGPAC MP4Box filter_queue.c gf_fq_pop use after free
• CVE-2026-1085401 PoCOpenSpug File Transfer transfer os command injection
• CVE-2026-1085421 PoC021is elvix-sdk MCP Request index.ts server-side request forgery
• CVE-2026-1085431 PoCag2ai ag2 UserProxyAgent os.path.join path traversal
• CVE-2026-1085451 PoCSillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing
• CVE-2026-1085461 PoCSpotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration
• CVE-2026-1085782 PoCsNeterbit NW-431F Embedded Web Server sms.json information disclosure
• CVE-2026-1085841 PoCFunnyWolf Viper config hard-coded credentials
• CVE-2026-1085921 PoCmini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
• CVE-2026-1085981 PoCFloci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates
• CVE-2026-1086051 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint
• CVE-2026-1086061 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById
• CVE-2026-1086071 PoCJeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
• CVE-2026-1086081 PoCJeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter
• CVE-2026-1086091 PoCJeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter
• CVE-2026-1086101 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint
• CVE-2026-1086111 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint
• CVE-2026-1086121 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
• CVE-2026-1086131 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint
• CVE-2026-1086141 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls
• CVE-2026-1086151 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete
• CVE-2026-1086161 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch
• CVE-2026-1086171 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint
• CVE-2026-1086181 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint
• CVE-2026-1086191 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint
• CVE-2026-1086201 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch
• CVE-2026-1086211 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit
• CVE-2026-1086221 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint
• CVE-2026-1086231 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch
• CVE-2026-1086241 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint
• CVE-2026-1086251 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint
• CVE-2026-1086261 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint
• CVE-2026-1086271 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint
• CVE-2026-1086281 PoCJeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
• CVE-2026-1086291 PoCJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint
• CVE-2026-1086301 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit
• CVE-2026-1086311 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/delete
• CVE-2026-1086321 PoCJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint
• CVE-2026-1086331 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add
• CVE-2026-1086341 PoCJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint
• CVE-2026-1086351 PoCJeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint
• CVE-2026-1086361 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel
• CVE-2026-1086371 PoCJeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint
• CVE-2026-1086381 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser
• CVE-2026-1086391 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}
• CVE-2026-1086401 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById
• CVE-2026-1086411 PoCJeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne
• CVE-2026-1086421 PoCJeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit
• CVE-2026-1086431 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch
• CVE-2026-1086441 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete
• CVE-2026-1086451 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit
• CVE-2026-1086461 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel
• CVE-2026-1086471 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel
• CVE-2026-1086481 PoCJeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint
• CVE-2026-1086491 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById
• CVE-2026-1086501 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet
• CVE-2026-1086511 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId
• CVE-2026-1086521 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar
• CVE-2026-1086531 PoCJeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list
• CVE-2026-1086541 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById
• CVE-2026-1086551 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById
• CVE-2026-1086561 PoCJeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint
• CVE-2026-1086571 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
• CVE-2026-1086581 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo
• CVE-2026-1086591 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId
• CVE-2026-1086601 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus
• CVE-2026-1086611 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant
• CVE-2026-1086621 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser
• CVE-2026-1086631 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply
• CVE-2026-1086641 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById
• CVE-2026-1086651 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit
• CVE-2026-1086661 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch
• CVE-2026-1086671 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin
• CVE-2026-1086681 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBin
• CVE-2026-1086691 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search
• CVE-2026-1086701 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment
• CVE-2026-1086711 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryById
• CVE-2026-1086721 PoCJeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
• CVE-2026-1086731 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls
• CVE-2026-1086741 PoCJeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById
• CVE-2026-1086751 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop
• CVE-2026-1086761 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles
• CVE-2026-1086771 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName
• CVE-2026-1086781 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles
• CVE-2026-1086791 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement
• CVE-2026-1086801 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement
• CVE-2026-1086811 PoCzhayujie CowAgent Web Console web_channel.py denial of service
• CVE-2026-1086821 PoCzhayujie CowAgent Web Console upload read denial of service
• CVE-2026-1086831 PoCzhayujie CowAgent Media Download memory allocation
• CVE-2026-1086881 PoCEladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload
• CVE-2026-1086891 PoCWukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
• CVE-2026-1086901 PoCmall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
• CVE-2026-1086911 PoCmall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
• CVE-2026-1086921 PoC1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints
• CVE-2026-1086931 PoCImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate
• CVE-2026-1087001 PoC1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title
• CVE-2026-1087011 PoC1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort
• CVE-2026-1087021 PoCCordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test
• CVE-2026-1087031 PoCCordysCRM through 1.9.3 Missing Authorization via /approval-resource/push
• CVE-2026-1087041 PoCCordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints
• CVE-2026-1087051 PoCCordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import
• CVE-2026-1087061 PoCeladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint
• CVE-2026-1087071 PoCWukong_HRM through commit 186115e Authentication Bypass via ParamAspect
• CVE-2026-1087081 PoCWukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil
• CVE-2026-1087681 PoCzhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources
• CVE-2026-1087691 PoCzhayujie CowAgent Markdown Rendering Markdown.tsx denial of service
• CVE-2026-1087721 PoCbleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal
• CVE-2026-1087831 PoCPRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials
• CVE-2026-1087841 PoCmacrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error
• CVE-2026-1087851 PoCmacrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration
• CVE-2026-1087861 PoChoutini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgery
• CVE-2026-1087871 PoChoutini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery
• CVE-2026-1087881 PoCdeepseek-ai deepseek-harness Sandbox spawn sandbox
• CVE-2026-1087891 PoCdeepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
• CVE-2026-1087901 PoCwestboy CicadasCMS Backend Template Editor save TemplateController.save path traversal
• CVE-2026-1087911 PoCwestboy CicadasCMS Template Management input TemplateController.input path traversal
• CVE-2026-1087991 PoCjackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection
• CVE-2026-1088011 PoCprasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload
• CVE-2026-1088021 PoCy_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting
• CVE-2026-1088051 PoCkrupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection
• CVE-2026-1088061 PoCkrupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection
• CVE-2026-1088071 PoCkrupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injection
• CVE-2026-1088101 PoCtsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure
• CVE-2026-1088111 PoCWMCMS index.php information disclosure
• CVE-2026-1088121 PoCSEMCMS SEMCMS_User.php user improper authorization
• CVE-2026-1088131 PoCSEMCMS SEMCMS_Download.php sql injection
• CVE-2026-1088141 PoCSEMCMS SEMCMS_Banner.php sql injection
• CVE-2026-1088151 PoCidcCMS member_deal.php cross site scripting
• CVE-2026-1088161 PoCagno-agi agno PythonTools python.py run_python_code code injection
• CVE-2026-1088171 PoCagno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection
• CVE-2026-1088181 PoCagno-agi agno auth.py get_authentication_dependency missing authentication
• CVE-2026-1088191 PoCagno-agi agno Agent Orchestration Layer exec dynamically-managed code resources
• CVE-2026-1088201 PoCagno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges
• CVE-2026-1088211 PoCTencent WeKnora SQL Validator inject.go validateSubquery sql injection
• CVE-2026-1088241 PoCDataEase Utils.java Utils.buildCalcField sql injection
• CVE-2026-1088251 PoCyangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management
• CVE-2026-1088261 PoCZen Cart PayPal IPN paypaldp.php zen_db_perform sql injection
• CVE-2026-1088271 PoCZen Cart Administrative Module Management general.php zen_call_function code injection
• CVE-2026-1088281 PoCZen Cart Admin Panel configuration.php eval sql injection
• CVE-2026-1088291 PoCZen Cart Module Configuration modules.php sql injection
• CVE-2026-1088301 PoCmeetecho janus-gateway VideoRoom janus_videoroom.c race condition
• CVE-2026-1088661 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths
• CVE-2026-1088671 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById
• CVE-2026-1088681 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement
• CVE-2026-1088691 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
• CVE-2026-1088701 PoCJeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
• CVE-2026-1088711 PoCJeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule
• CVE-2026-1088721 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers
• CVE-2026-1088731 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo
• CVE-2026-1088741 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson
• CVE-2026-1088751 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
• CVE-2026-1088761 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit
• CVE-2026-1088771 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete
• CVE-2026-1088781 PoCJeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById
• CVE-2026-1088791 PoCJeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter
• CVE-2026-1088801 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId
• CVE-2026-1088811 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo
• CVE-2026-1088821 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser
• CVE-2026-1088831 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig
• CVE-2026-1088841 PoCJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint
• CVE-2026-1088851 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete
• CVE-2026-1088861 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername
• CVE-2026-1088871 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls
• CVE-2026-1088881 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls
• CVE-2026-1088901 PoCBlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorization
• CVE-2026-1088911 PoCJeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId
• CVE-2026-1088921 PoCLinksys E1700 Mac Filter ssid1MACFilter stack-based overflow
• CVE-2026-1088931 PoCLinksys E1700 setVlan stack-based overflow
• CVE-2026-1088941 PoCLinksys E1700 Static Route addStaticRoute os command injection
• CVE-2026-1088951 PoCLinksys E1700 setDMZ os command injection
• CVE-2026-1088961 PoCLinksys E1700 setLinksysIpv6 os command injection
• CVE-2026-1088971 PoCSmart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine
• CVE-2026-1088991 PoCtobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization
• CVE-2026-1089001 PoCExponent CMS XML-RPC xmlrpc.php userLogin sql injection
• CVE-2026-1089011 PoCShenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layer
• CVE-2026-1089061 PoCNetcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
• CVE-2026-1089071 PoCNetcore NR268 CGI Execution user_ok improper authentication
• CVE-2026-1089081 PoCNetcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
• CVE-2026-1089141 PoCEdimax BR-6208AC formWlSiteSurvey buffer overflow
• CVE-2026-1089151 PoCEdimax BR-6208AC formWlanMP buffer overflow
• CVE-2026-1089161 PoCEdimax BR-6208AC formAccept command injection
• CVE-2026-1089171 PoCEdimax BR-6208AC formAutoFWupgrade command injection
• CVE-2026-1089181 PoCEdimax BR-6208AC formWlanMP command injection
• CVE-2026-1089211 PoCKusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authentication
• CVE-2026-1089221 PoCKusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload
• CVE-2026-1089231 PoC1024-lab smart-admin Support Config Query queryByKey access control
• CVE-2026-1089241 PoCgetkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization
• CVE-2026-1089261 PoCitsourcecode Baptism Information Management System ebaptism.php sql injection
• CVE-2026-1089271 PoCitsourcecode Baptism Information Management System pbaptism.php sql injection
• CVE-2026-1089281 PoCitsourcecode Online Admission System sum.php sql injection
• CVE-2026-1089311 PoCNetcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
• CVE-2026-1089331 PoCEdimax BR-6208AC formFilter cross site scripting
• CVE-2026-1089341 PoCEdimax BR-6208AC HTTP Blocking formUrlb cross site scripting
• CVE-2026-1089351 PoCEdimax BR-6208AC Port Forwarding formPortFw cross site scripting
• CVE-2026-1089361 PoCEdimax BR-6208AC QoS Page formQoS cross site scripting
• CVE-2026-1089371 PoCcode-projects Online Ticket Reservation System medallion.sql file information disclosure
• CVE-2026-1089381 PoCcode-projects Matrimonial System matrimony.sql file access
• CVE-2026-1089431 PoCModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection
• CVE-2026-1089471 PoCyoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization
• CVE-2026-1089481 PoCcode-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes
• CVE-2026-1089501 PoCOpen Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes
• CVE-2026-1089541 PoCk2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow
• CVE-2026-1089551 PoCTiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds
• CVE-2026-1089561 PoCcode-projects Online Reviewer System User Update btn_functions.php sql injection
• CVE-2026-1089571 PoCTinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection
• CVE-2026-1089581 PoCTensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization
• CVE-2026-1089591 PoCitsourcecode Online Cake Ordering System addtransacdetail.php sql injection
• CVE-2026-1089601 PoCTiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bounds
• CVE-2026-1089631 PoCdatabasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can…
• CVE-2026-1089641 PoCSourceCodester Performance Indicator System addproduct.php sql injection
• CVE-2026-1089651 PoCSourceCodester Performance Indicator System edit_quantity.php sql injection
• CVE-2026-1089661 PoCSourceCodester Performance Indicator System product.php sql injection
• CVE-2026-1089671 PoCSourceCodester Performance Indicator System edit_credit.php sql injection
• CVE-2026-1089681 PoCSourceCodester Performance Indicator System sales_history.php sql injection
• CVE-2026-1089691 PoCitsmeravitejak Online-Examination-System Session session.php checkLogin comparison
• CVE-2026-1089701 PoCitsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection
• CVE-2026-1089711 PoCD-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification
• CVE-2026-1089721 PoCSourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication
• CVE-2026-1089731 PoCSourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload
• CVE-2026-1089741 PoCSourceCodester E-Learning System Users.php save_users unrestricted upload
• CVE-2026-1089751 PoCSourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload
• CVE-2026-1089801 PoCBlinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path…