CVE-2026-72000 to CVE-2026-72999

12 CVEs with public proof-of-concept exploits.

• CVE-2026-725301 PoCKEVA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X…
• CVE-2026-725501 PoCFriendica Friendica - SQL Injection
• CVE-2026-727031 PoCRocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls
• CVE-2026-727041 PoCRocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport
• CVE-2026-727051 PoCRocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argument
• CVE-2026-727111 PoCLean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variable
• CVE-2026-727141 PoCRocq Prover through 9.2.0 Universe Checking State Desynchronised After Module Close
• CVE-2026-727411 PoCRainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
• CVE-2026-727431 PoCSQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
• CVE-2026-727771 PoCNext AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url
• CVE-2026-728442 PoCsLean 4 Kernel Type Checking Bypass via Mismatched Structure Projections
• CVE-2026-728987 PoCsKEVMetabase SQL injection via password reset endpoint