CVE-2026-76000 to CVE-2026-76999

51 CVEs with public proof-of-concept exploits.

• CVE-2026-760031 PoCUTT HiPER 1200GW formGroupConfig strcpy stack-based overflow
• CVE-2026-760041 PoCUTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow
• CVE-2026-760141 PoCBusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference
• CVE-2026-760361 PoCBuffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside…
• CVE-2026-760481 PoCSourceCodester Simple Online Food Ordering System ajax.php login sql injection
• CVE-2026-760491 PoCSourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection
• CVE-2026-760501 PoCSourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection
• CVE-2026-760601 PoCOS Command Injection in PayRange API
• CVE-2026-760702 PoCsNetis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter
• CVE-2026-760712 PoCsNetis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter
• CVE-2026-765461 PoCProfile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode
• CVE-2026-765471 PoCProfile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export
• CVE-2026-765481 PoCProfile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass
• CVE-2026-765491 PoCUpdraftPlus < 1.26.7 - Backup Restoration via CSRF
• CVE-2026-765641 PoCJoomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
• CVE-2026-765651 PoCJoomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
• CVE-2026-765741 PoCcode-projects Hospital Information System User Login UsersController.php login sql injection
• CVE-2026-765761 PoCyangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
• CVE-2026-765811 PoCWPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion
• CVE-2026-765821 PoCTRENDnet TEW-821DAP ssi ping.cgi system command injection
• CVE-2026-765831 PoCTRENDnet TV-IP751WIC alphapd set_time.cgi command injection
• CVE-2026-765841 PoCTRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
• CVE-2026-765851 PoCCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter
• CVE-2026-765861 PoCBookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation
• CVE-2026-765891 PoCTRENDnet TEW-755AP mycli FUN_401000 stack-based overflow
• CVE-2026-765901 PoCTRENDnet TEW-755AP ssi wan.cgi stack-based overflow
• CVE-2026-765911 PoCTRENDnet TEW-755AP ssi email.cgi log_email_server command injection
• CVE-2026-766392 PoCsUnitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal
• CVE-2026-766402 PoCsUnitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack
• CVE-2026-767601 PoCchenhg5 cc-connect webhook.go authenticate code injection
• CVE-2026-767611 PoCchenhg5 cc-connect Management API engine.go shellExecCommand os command injection
• CVE-2026-767621 PoCcode-projects Assessment Management welcome.php sql injection
• CVE-2026-767641 PoCcode-projects Employee Management System Admin Login Endpoint aprocess.php sql injection
• CVE-2026-767831 PoCDeDeCMS advancedsearch.php sql injection
• CVE-2026-767851 PoCamirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection
• CVE-2026-767891 PoCSlider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers
• CVE-2026-767931 PoCFirebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim
• CVE-2026-767951 PoCAeternaLabsHQ PullMD REST API Endpoint api server-side request forgery
• CVE-2026-767991 PoCcode-projects Login Registration System SQL Database Backup login_registration_system.sql file access
• CVE-2026-768001 PoCDeDeCMS select_media_post.php unrestricted upload
• CVE-2026-769043 PoCsGeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
• CVE-2026-769051 PoCkin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
• CVE-2026-769871 PoCliftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption
• CVE-2026-769881 PoCliftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds
• CVE-2026-769891 PoCliftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds
• CVE-2026-769901 PoCcode-projects Simple Inventory System delete.php sql injection
• CVE-2026-769911 PoCitsourcecode Hospital Management System viewappointmentapproved.php sql injection
• CVE-2026-769951 PoCSourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload
• CVE-2026-769961 PoCSourceCodester Simple Online Food Ordering System view_order.php sql injection
• CVE-2026-769971 PoCSourceCodester Simple Online Food Ordering System ajax.php save_category sql injection
• CVE-2026-769981 PoCSourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection