CVE-2026-111000 to CVE-2026-111999

61 CVEs with public proof-of-concept exploits.

• CVE-2026-1110411 PoCAI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media
• CVE-2026-1111251 PoCCFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble
• CVE-2026-1111371 PoClibsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
• CVE-2026-1111381 PoCNetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders
• CVE-2026-1111391 PoCNetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask
• CVE-2026-1111401 PoClibregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data
• CVE-2026-1111431 PoCAnsilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE Decoding
• CVE-2026-1111441 PoClibansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin
• CVE-2026-1111451 PoCytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF
• CVE-2026-1111461 PoCytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c
• CVE-2026-1111471 PoCLibyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value
• CVE-2026-1111481 PoClibsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune
• CVE-2026-1111491 PoCFreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits
• CVE-2026-1111501 PoCValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlk
• CVE-2026-1111511 PoCOpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder
• CVE-2026-1111521 PoCGame Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader
• CVE-2026-1111531 PoCGame Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_
• CVE-2026-1111541 PoClibTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse_gen in SoundFont Loader
• CVE-2026-1111551 PoClibTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c
• CVE-2026-1111561 PoClibTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header
• CVE-2026-1111571 PoCSoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding
• CVE-2026-1111581 PoCEarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detect
• CVE-2026-1111591 PoClibewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing
• CVE-2026-1111601 PoCLightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization
• CVE-2026-1112101 PoCbitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery
• CVE-2026-1112121 PoCImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection
• CVE-2026-1112141 PoCNetgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php
• CVE-2026-1112152 PoCsNetgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
• CVE-2026-1112161 PoCNetgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP
• CVE-2026-1112171 PoCNetgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID
• CVE-2026-1112181 PoCNetgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters
• CVE-2026-1112191 PoCNetgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username
• CVE-2026-1112201 PoCNetgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
• CVE-2026-1112211 PoCNetgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection
• CVE-2026-1112221 PoCNetgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting
• CVE-2026-1112231 PoCNetgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner
• CVE-2026-1112241 PoCNetgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh
• CVE-2026-1112251 PoCNetgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh
• CVE-2026-1112261 PoCNetgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php
• CVE-2026-1112271 PoCNetgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php
• CVE-2026-1112281 PoCNetgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
• CVE-2026-1112291 PoCNetgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync
• CVE-2026-1112301 PoCNetgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL
• CVE-2026-1112311 PoCNetgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()
• CVE-2026-1112321 PoCNetgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color
• CVE-2026-1112341 PoCSimplePie through 1.9.0 Local File Read via file:// Redirect
• CVE-2026-1112811 PoCJooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials
• CVE-2026-1112841 PoCAureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal
• CVE-2026-1113571 PoCIvanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege…
• CVE-2026-1114441 PoCWheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an…
• CVE-2026-1118231 PoCMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
• CVE-2026-1118651 PoCTHU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection
• CVE-2026-1118681 PoCdatastax pulsar-jms PulsarObjectMessage.java decode deserialization
• CVE-2026-1118691 PoCmakeplane API Endpoint reliance on untrusted inputs in a security decision
• CVE-2026-1118701 PoCitsmeravitejak Online-Examination-System admin.php isAdmin missing authentication
• CVE-2026-1118711 PoCitsmeravitejak Online-Examination-System subjectsdb.php sql injection
• CVE-2026-1118721 PoCitsmeravitejak Online-Examination-System database.php getreport sql injection
• CVE-2026-1118731 PoCitsmeravitejak Online-Examination-System AJAX Endpoint exammanger.php topicslist sql injection
• CVE-2026-1118741 PoCOpenCATS Career Portal CareersUI.php processLogin excessive authentication
• CVE-2026-1118751 PoCDavid-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization
• CVE-2026-1119421 PoChrisikeshpal Blood_Bank_Management_System abs.php cross site scripting