CVE-2026-57000 to CVE-2026-57999

46 CVEs with public proof-of-concept exploits.

• CVE-2026-570621 PoCCMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is…
• CVE-2026-571151 PoCPraisonAI: SpiderTools redirect-target SSRF protection bypass
• CVE-2026-571191 PoCPraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API
• CVE-2026-571201 PoCPraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder
• CVE-2026-571221 PoCPraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)
• CVE-2026-571231 PoCPraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
• CVE-2026-571241 PoCPraisonAI UI MCP connect endpoint allows unauthenticated local command execution
• CVE-2026-571251 PoCPraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass
• CVE-2026-571271 PoCpraisonai: recipe serve auth middleware silently disables itself when no secret is set
• CVE-2026-571281 PoCPraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
• CVE-2026-571291 PoCPraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
• CVE-2026-571301 PoCPraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters
• CVE-2026-571311 PoCpraisonai: Jobs API exposes agent-execution endpoints with no authentication
• CVE-2026-571411 PoCPraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
• CVE-2026-571431 PoCPraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
• CVE-2026-571451 PoCPraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
• CVE-2026-571471 PoCpraisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
• CVE-2026-571481 PoCpraisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
• CVE-2026-571551 PoCOPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
• CVE-2026-572191 PoCRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
• CVE-2026-572391 PoCFoxit PDF Editor/Reader Local Privilege Escalation
• CVE-2026-574391 PoCCyberChef: Prototype pollution in Series Chart operation
• CVE-2026-574401 PoCMediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled
• CVE-2026-574431 PoCSCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests
• CVE-2026-574491 PoCActual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token
• CVE-2026-574581 PoCVikunja: Scoped API token can mint unrestricted OAuth session credentials
• CVE-2026-574961 PoCNetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction
• CVE-2026-575173 PoCsControl Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter
• CVE-2026-575181 PoCPagekit CMS 1.0.18 Privilege Escalation via UserApiController
• CVE-2026-575201 PoCBitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint
• CVE-2026-575211 PoCBitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController
• CVE-2026-575221 PoCBitwarden Server < 2026.5.0 JSON Injection via Webhook Templates
• CVE-2026-575841 PoCPhalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS
• CVE-2026-575882 PoCsSQL Injection in Nessus via Malicious Scan Result File Import
• CVE-2026-578111 PoCWordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability
• CVE-2026-578212 PoCsApache Fineract: Office list: SQL Injection via Subquery in orderBy
• CVE-2026-578276 PoCsJoomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12
• CVE-2026-578291 PoCJoomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7
• CVE-2026-578301 PoCJoomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7
• CVE-2026-578501 PoCRustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection
• CVE-2026-578511 PoCMSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers
• CVE-2026-578631 PoCCrater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint
• CVE-2026-578861 PoCCross-repository issue/comment attachment re-linking can expose private attachment content
• CVE-2026-579511 PoCMythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table
• CVE-2026-579521 PoCMythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID
• CVE-2026-579671 PoCApache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment