CVE-2026-116000 to CVE-2026-116999

102 CVEs with public proof-of-concept exploits.

• CVE-2026-1160002 PoCsZylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
• CVE-2026-1160041 PoConyx-dot-app Onyx PreviewTab.tsx cross site scripting
• CVE-2026-1160062 PoCsYunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication
• CVE-2026-1160071 PoCYunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive…
• CVE-2026-1160441 PoCprasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload
• CVE-2026-1160451 PoC1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal
• CVE-2026-1160471 PoCPrivoce Vocechat Query Parameter widget.html cross site scripting
• CVE-2026-1160481 PoCkrupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection
• CVE-2026-1160491 PoCkrupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql injection
• CVE-2026-1160501 PoCkrupalshah Employee Recruitment System Registration registerform3.php sql injection
• CVE-2026-1160541 PoCSH3 Módulo de Gestão/Módulo de Arrecadação weak password hash
• CVE-2026-1160551 PoCSourceCodester Performance Indicator System deleteproduct.php sql injection
• CVE-2026-1160601 PoCSourceCodester Performance Indicator System adddealer.php sql injection
• CVE-2026-1160611 PoCSourceCodester Performance Indicator System edit_dealer.php sql injection
• CVE-2026-1160621 PoCSourceCodester Performance Indicator System save_profile.php sql injection
• CVE-2026-1160632 PoCsDedeCMS update_guide.php require_once code injection
• CVE-2026-1160671 PoCPaisa before 0.7.8 Path Traversal via Editor and Sheet API
• CVE-2026-1160701 PoCDocker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config
• CVE-2026-1160941 PoCEyouCMS function.php remote_file_to_local server-side request forgery
• CVE-2026-1160951 PoCsmg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation
• CVE-2026-1160961 PoCggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
• CVE-2026-1160991 PoCFusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
• CVE-2026-1161001 PoCgougucms User Level Level.php add cross site scripting
• CVE-2026-1161011 PoCitsourcecode Online Cake Ordering System deletetransac.php sql injection
• CVE-2026-1161031 PoCSony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection
• CVE-2026-1161041 PoCSony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection
• CVE-2026-1161101 PoCGiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication
• CVE-2026-1161111 PoC2K Games Civilization V Lua Sandbox loadstring type confusion
• CVE-2026-1161121 PoCHashenUdara edoc-doctor-appointment-system add-new.php sql injection
• CVE-2026-1161131 PoCGouGuOA Api.php chunkUpload unrestricted upload
• CVE-2026-1161141 PoCYoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
• CVE-2026-1161151 PoCYoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization
• CVE-2026-1161161 PoCYoosee GM8135S Camera Secure Boot signature verification
• CVE-2026-1161181 PoCZ.ai Zcode Sed Command Filter os command injection
• CVE-2026-1161671 PoCSiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter
• CVE-2026-1161911 PoCRclone before 1.75.2 Path Traversal via serve webdav MKCOL
• CVE-2026-1162051 PoCYesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax
• CVE-2026-1162231 PoCicret EasyImage del.php privileges management
• CVE-2026-1162241 PoCfr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery
• CVE-2026-1162271 PoCEdimax BR-6208AC Virtual Server cross site scripting
• CVE-2026-1162281 PoC777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication
• CVE-2026-1162291 PoCffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scripting
• CVE-2026-1162311 PoCOray Pugongying X5 Pro Ser2net crlf injection
• CVE-2026-1162321 PoCOray Pugongying X5 Pro SNMP snmp_set crlf injection
• CVE-2026-1162331 PoCOray Pugongying X5 Pro Dnsmasq crlf injection
• CVE-2026-1162341 PoCOray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection
• CVE-2026-1162351 PoCOray Pugongying X5 Pro L2TP Authentication crlf injection
• CVE-2026-1162361 PoCOray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload
• CVE-2026-1162371 PoCOray Pugongying X5 Pro Dnsmasq crlf injection
• CVE-2026-1162441 PoCpgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials
• CVE-2026-1162541 PoCrathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation
• CVE-2026-1162551 PoCPGYER codefever URI Sanitizer doc.php _detail path traversal
• CVE-2026-1162561 PoCgeesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgery
• CVE-2026-1162571 PoCBillaBear Installation InstallController.php processInstall missing authentication
• CVE-2026-1162582 PoCslibimobiledevice AFC afc.c heap-based overflow
• CVE-2026-1162591 PoClibimobiledevice Device Info afc.c afc_get_device_info_key memory corruption
• CVE-2026-1162601 PoClibimobiledevice AFC Service afc.c service_receive double free
• CVE-2026-1162612 PoCslibimobiledevice AFC File afc.c afc_file_open out-of-bounds
• CVE-2026-1162621 PoClibimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow
• CVE-2026-1162631 PoCHaschekSolutions PictShare File Upload core.php architect race condition
• CVE-2026-1162741 PoCJIZHICMS Front-end Order OrderController.php pay improper authorization
• CVE-2026-1162751 PoCAllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection
• CVE-2026-1163391 PoCiFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
• CVE-2026-1163401 PoCiFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization
• CVE-2026-1163661 PoCUnauthenticated RCE vulnerability against ClickHouse Server
• CVE-2026-1163701 PoC2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion
• CVE-2026-1163841 PoCBdtask Garage 24 Garage Management Software Backend improper authorization
• CVE-2026-1163851 PoCBdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting
• CVE-2026-1164611 PoCOmega Solution Restro POS sale-invoice logic error
• CVE-2026-1164711 PoCBKWLD Decoy Authorization Policy Policy.php privileges management
• CVE-2026-1164821 PoCsubhajitkhan online-clinic-management-system patientregistration.php cross site scripting
• CVE-2026-1164851 PoCdanmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints
• CVE-2026-1165041 PoCTOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
• CVE-2026-1165051 PoCTOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection
• CVE-2026-1165061 PoCTOTOLINK A950RG firewall.so apmib_set command injection
• CVE-2026-1165071 PoCTOTOLINK A950RG global.so getLanguageCfg information disclosure
• CVE-2026-1165081 PoCTOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
• CVE-2026-1165541 PoCArgilla Settings SettingsInfo.vue Dataset.from_disk cross site scripting
• CVE-2026-1165551 PoCArgilla Sandbox.vue cross site scripting
• CVE-2026-1165561 PoCArgilla TextField.vue cross site scripting
• CVE-2026-1165761 PoCsysteminformation: Windows command injection in services() through Unicode quotation marks
• CVE-2026-1165791 PoCAutobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)
• CVE-2026-1165871 PoCGo JOSE: DoS when parsing JWKs that contain RSA keys
• CVE-2026-1165911 PoCcompress zstd: Panic on two-block frames
• CVE-2026-1166021 PoCSourceCodester Online Food Ordering System delete.php unlink path traversal
• CVE-2026-1166031 PoCSourceCodester Online Food Ordering System add_food.php unrestricted upload
• CVE-2026-1166041 PoCSourceCodester Online Food Ordering System delete_admin.php missing authentication
• CVE-2026-1166051 PoCSourceCodester Online Food Ordering System order.php client-side enforcement of server-side security
• CVE-2026-1166081 PoCDAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check
• CVE-2026-1166201 PoCTencent RapidJSON Regex stream.h Take out-of-bounds
• CVE-2026-1166231 PoCcode-projects Simple Content Management System Admin welcome.php authorization
• CVE-2026-1166391 PoCMD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting
• CVE-2026-1166401 PoCSaruf-Ratul HR-Payroll-Management-System chat.php cross site scripting
• CVE-2026-1166731 PoCsysteminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
• CVE-2026-1166741 PoCsysteminformation: Prototype pollution in `networkStats()` via the interface name
• CVE-2026-1166761 PoCAtlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
• CVE-2026-1166821 PoCFileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
• CVE-2026-1166901 PoCMLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
• CVE-2026-1166911 PoCMLflow CrewAI autologging records LLM provider API keys in logged trace spans
• CVE-2026-1166922 PoCsMLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact…
• CVE-2026-1167482 PoCsTransmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
• CVE-2026-1167951 PoCRE2JS: Quadratic-time denial of service in re2js lookbehind matching