CVE-2026-76000 to CVE-2026-76999

74 CVEs with public proof-of-concept exploits.

• CVE-2026-760031 PoCUTT HiPER 1200GW formGroupConfig strcpy stack-based overflow
• CVE-2026-760041 PoCUTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow
• CVE-2026-760141 PoCBusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference
• CVE-2026-760361 PoCBuffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside…
• CVE-2026-760481 PoCSourceCodester Simple Online Food Ordering System ajax.php login sql injection
• CVE-2026-760491 PoCSourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection
• CVE-2026-760501 PoCSourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection
• CVE-2026-760601 PoCOS Command Injection in PayRange API
• CVE-2026-760702 PoCsNetis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter
• CVE-2026-760712 PoCsNetis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter
• CVE-2026-762171 PoCGitPython before 3.1.58 Arbitrary File Read via pathspec-from-file
• CVE-2026-762201 PoCGitPython before 3.1.58 Command Execution via split_single_char_options
• CVE-2026-762221 PoCGitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
• CVE-2026-762682 PoCsMissing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise
• CVE-2026-764602 PoCsKEVCisco Identity Services Engine Authentication Bypass Vulnerability
• CVE-2026-764611 PoCKEVCisco Secure Email Gateway SQL Injection Vulnerability
• CVE-2026-765041 PoCKEVCisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
• CVE-2026-765192 PoCsKEVCisco Secure Email Gateway Arbitrary File Write Vulnerability
• CVE-2026-765461 PoCProfile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode
• CVE-2026-765471 PoCProfile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export
• CVE-2026-765481 PoCProfile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass
• CVE-2026-765491 PoCUpdraftPlus < 1.26.7 - Backup Restoration via CSRF
• CVE-2026-765501 PoCWP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal
• CVE-2026-765511 PoCWP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function
• CVE-2026-765521 PoCWP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import
• CVE-2026-765531 PoCWP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal
• CVE-2026-765541 PoCWP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import
• CVE-2026-765552 PoCsWP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal
• CVE-2026-765561 PoCWP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules
• CVE-2026-765571 PoCWP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options
• CVE-2026-765581 PoCWP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names
• CVE-2026-765591 PoCWP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling
• CVE-2026-765641 PoCJoomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
• CVE-2026-765651 PoCJoomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
• CVE-2026-765701 PoCJoomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1
• CVE-2026-765741 PoCcode-projects Hospital Information System User Login UsersController.php login sql injection
• CVE-2026-765761 PoCyangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
• CVE-2026-765781 PoCIpa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci
• CVE-2026-765811 PoCWPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion
• CVE-2026-765821 PoCTRENDnet TEW-821DAP ssi ping.cgi system command injection
• CVE-2026-765831 PoCTRENDnet TV-IP751WIC alphapd set_time.cgi command injection
• CVE-2026-765841 PoCTRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
• CVE-2026-765851 PoCCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter
• CVE-2026-765861 PoCBookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation
• CVE-2026-765891 PoCTRENDnet TEW-755AP mycli FUN_401000 stack-based overflow
• CVE-2026-765901 PoCTRENDnet TEW-755AP ssi wan.cgi stack-based overflow
• CVE-2026-765911 PoCTRENDnet TEW-755AP ssi email.cgi log_email_server command injection
• CVE-2026-766392 PoCsUnitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal
• CVE-2026-766402 PoCsUnitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack
• CVE-2026-767601 PoCchenhg5 cc-connect webhook.go authenticate code injection
• CVE-2026-767611 PoCchenhg5 cc-connect Management API engine.go shellExecCommand os command injection
• CVE-2026-767621 PoCcode-projects Assessment Management welcome.php sql injection
• CVE-2026-767641 PoCcode-projects Employee Management System Admin Login Endpoint aprocess.php sql injection
• CVE-2026-767851 PoCamirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection
• CVE-2026-767891 PoCSlider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers
• CVE-2026-767901 PoCEstatik < 4.3.5 - Reflected XSS via get_listings hash Parameter
• CVE-2026-767931 PoCFirebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim
• CVE-2026-767951 PoCAeternaLabsHQ PullMD REST API Endpoint api server-side request forgery
• CVE-2026-767991 PoCcode-projects Login Registration System SQL Database Backup login_registration_system.sql file access
• CVE-2026-768441 PoCzlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write
• CVE-2026-768461 PoCGrav before 2.0.16 Information Disclosure via Twig Sandbox
• CVE-2026-769043 PoCsGeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
• CVE-2026-769051 PoCkin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
• CVE-2026-769091 PoCUnleash: CR-approval email renders user-controlled raw HTML
• CVE-2026-769101 PoCUnleash: Clone-feature lets a user copy a feature from a project they cannot read
• CVE-2026-769871 PoCliftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption
• CVE-2026-769881 PoCliftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds
• CVE-2026-769891 PoCliftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds
• CVE-2026-769901 PoCcode-projects Simple Inventory System delete.php sql injection
• CVE-2026-769911 PoCitsourcecode Hospital Management System viewappointmentapproved.php sql injection
• CVE-2026-769951 PoCSourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload
• CVE-2026-769961 PoCSourceCodester Simple Online Food Ordering System view_order.php sql injection
• CVE-2026-769971 PoCSourceCodester Simple Online Food Ordering System ajax.php save_category sql injection
• CVE-2026-769981 PoCSourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection