CVE-2026-85000 to CVE-2026-85999

6 CVEs with public proof-of-concept exploits.

• CVE-2026-850211 PoClanggenius dify Splash Layout splash.tsx router.replace cross site scripting
• CVE-2026-850221 PoClanggenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting
• CVE-2026-850301 PoCHKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error
• CVE-2026-850401 PoCZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection
• CVE-2026-850911 PoCzlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
• CVE-2026-850921 PoCLiME through 1.12.0 Arbitrary File Overwrite via Symlink Following