CVE-2026-80000 to CVE-2026-80999

7 CVEs with public proof-of-concept exploits.

• CVE-2026-800491 PoCAirbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
• CVE-2026-800511 PoCgithub.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type. The…
• CVE-2026-802141 PoCLibreNMS Virtualisation Discovery Module RCE
• CVE-2026-803111 PoCStripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR
• CVE-2026-804282 PoCsILIAS before 9.22, 10.10 and 11.3 Unauthenticated PHP Object Injection via Shibboleth Logout Endpoint
• CVE-2026-804671 PoCAdvanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action
• CVE-2026-804881 PoCWP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields