CVE-2026-79000 to CVE-2026-79999
32 CVEs with public proof-of-concept exploits.
- CVE-2026-794171 PoCImproper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to…
- CVE-2026-794831 PoCFastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An…
- CVE-2026-796151 PoCQuiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR
- CVE-2026-796171 PoCImproper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter
- CVE-2026-796181 PoCWP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated Form
- CVE-2026-796211 PoCCatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient
- CVE-2026-796221 PoCdekdee adobe-xd-mcp file-access-from-request Endpoint xd-parser.ts path traversal
- CVE-2026-796301 PoCWPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution
- CVE-2026-796311 PoCWPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files
- CVE-2026-796321 PoCWPFunnels < 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending via wpfnl_shortcode_optin_submission
- CVE-2026-796571 PoCNLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization
- CVE-2026-796741 PoCNLTK 3.10.2 Path Traversal via corpus-reader constructors
- CVE-2026-796761 PoCNLTK before 3.10.3 Path Traversal via Symlink Bypass
- CVE-2026-797061 PoCBreeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal
- CVE-2026-797081 PoCIncorrect Authorization in GitLab
- CVE-2026-797131 PoCBreeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters
- CVE-2026-797521 PoCCakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
- CVE-2026-797671 PoCGardener: Authorization Bypass via Group Subject Injection
- CVE-2026-797921 PoCzackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection
- CVE-2026-797931 PoCcode-projects Online Shopping System sumit_form.php cross site scripting
- CVE-2026-798041 PoCSililaWijesinghe Food Ordering System search.php sql injection
- CVE-2026-798451 PoCcode-projects Simple Inventory System edit.php sql injection
- CVE-2026-799111 PoCTOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow
- CVE-2026-799121 PoCTOTOLINK N600R cstecgi.cgi getCurrentTime command injection
- CVE-2026-799131 PoCCloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and…
- CVE-2026-799831 PoCApache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without…
- CVE-2026-799841 PoCApache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without…
- CVE-2026-799851 PoCApache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without…
- CVE-2026-799861 PoCApache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without…
- CVE-2026-799871 PoCLow-privilege RCE through element-search eager loading
- CVE-2026-799951 PoCUser Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR
- CVE-2026-799961 PoCUser Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings