CVE-2026-85000 to CVE-2026-85999

123 CVEs with public proof-of-concept exploits.

• CVE-2026-850001 PoCEmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating
• CVE-2026-850011 PoCEmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute
• CVE-2026-850021 PoCEmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes
• CVE-2026-850041 PoCPopup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect
• CVE-2026-850051 PoCPopup Maker WP 1.2.2.1 - 1.4.5 - Subscriber+ Zero-Argument PHP Callable Invocation via Missing Authorization
• CVE-2026-850061 PoCHappy Addons for Elementor < 3.50.0 - Contributor+ Stored XSS via Creative Button Widget
• CVE-2026-850091 PoCRestroPress <= 3.4.6 - Unauthenticated Order Enumeration and Order Note Modification via Payment Recovery
• CVE-2026-850101 PoCRestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons
• CVE-2026-850151 PoCUnlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal
• CVE-2026-850161 PoCUnlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter
• CVE-2026-850171 PoCUnlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection
• CVE-2026-850211 PoClanggenius dify Splash Layout splash.tsx router.replace cross site scripting
• CVE-2026-850221 PoClanggenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting
• CVE-2026-850301 PoCHKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error
• CVE-2026-850371 PoCSunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR
• CVE-2026-850381 PoCB2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection
• CVE-2026-850401 PoCZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection
• CVE-2026-850451 PoCRace condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
• CVE-2026-850467 PoCsKEVType confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
• CVE-2026-850481 PoCUse after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process…
• CVE-2026-850581 PoCMoquette: Missing Authorization in io.moquette:moquette-broker
• CVE-2026-850781 PoCsanic chunked trailer request smuggling allows hidden second request execution
• CVE-2026-850811 PoCMultiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
• CVE-2026-850911 PoCzlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
• CVE-2026-850921 PoCLiME through 1.12.0 Arbitrary File Overwrite via Symlink Following
• CVE-2026-850974 PoCsBricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
• CVE-2026-851001 PoC2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption
• CVE-2026-851022 PoCsKEVImproper Certificate Validation in Quantum Security Gateway
• CVE-2026-851091 PoCTenda HG10 Boa Web Server formLogin buffer overflow
• CVE-2026-851101 PoCTenda HG10 Boa Web Server formWlanSetup buffer overflow
• CVE-2026-851131 PoCGiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name
• CVE-2026-851161 PoCSimple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field…
• CVE-2026-851171 PoCContact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation
• CVE-2026-851181 PoCAI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion
• CVE-2026-851211 PoCInsurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign
• CVE-2026-851221 PoCEasy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion
• CVE-2026-851231 PoCEasy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion
• CVE-2026-851261 PoCCrowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation
• CVE-2026-851271 PoCVikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment
• CVE-2026-851281 PoCChoose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request
• CVE-2026-851291 PoCHoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Import
• CVE-2026-851301 PoCWPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs
• CVE-2026-851311 PoCWPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF
• CVE-2026-851321 PoCWPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan
• CVE-2026-851331 PoCWPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
• CVE-2026-851371 PoCSeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection
• CVE-2026-851381 PoCSeaCMS WeChat index.php addslashes sql injection
• CVE-2026-851861 PoCitsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload
• CVE-2026-851871 PoCitsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injection
• CVE-2026-852001 PoCGEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
• CVE-2026-852071 PoCitsourcecode Online Medicine Delivery System index.php cross site scripting
• CVE-2026-852081 PoCitsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload
• CVE-2026-852221 PoCD-Link DNS-340L Add-On Center addon_center.cgi os command injection
• CVE-2026-852231 PoCD-Link DNS-340L CGI dropbox.cgi os command injection
• CVE-2026-852241 PoCD-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection
• CVE-2026-852251 PoCcode-projects Doctor Appointment System patient_login.php sql injection
• CVE-2026-853451 PoCFV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data
• CVE-2026-853481 PoCGDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF
• CVE-2026-853491 PoCFluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR
• CVE-2026-853501 PoCUpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together
• CVE-2026-853781 PoClight0011 cms Chapter Controller ChapterController.class.php _initialize authorization
• CVE-2026-853791 PoClight0011 cms Query Builder ChapterController.class.php searchChapter sql injection
• CVE-2026-853801 PoClight0011 cms UEditor controller.php catchimage server-side request forgery
• CVE-2026-853811 PoClight0011 cms Chapter Controller ChapterController.class.php authorization
• CVE-2026-853821 PoClight0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scripting
• CVE-2026-853831 PoCitsourcecode Sales and Inventory System inv_del.php sql injection
• CVE-2026-853971 PoCcode-projects Hospital Information System addReq.php findBySearch sql injection
• CVE-2026-853981 PoCcode-projects Hospital Information System viewReq.php viewReq sql injection
• CVE-2026-853991 PoCcode-projects Hospital Information System PrespController.php getSinglePresp sql injection
• CVE-2026-854011 PoCDolibarr Legacy File Manager config.inc.php access control
• CVE-2026-854021 PoCcode-projects Doctor Appointment System booking.php sql injection
• CVE-2026-854031 PoCcode-projects Doctor Appointment System contactus.php sql injection
• CVE-2026-854051 PoCEleveo Call Recording Software roleAddAction.do cross site scripting
• CVE-2026-854061 PoCEleveo Quality Management Conversation Review cross site scripting
• CVE-2026-854071 PoCEleveo Quality Management Conversation events denial of service
• CVE-2026-854081 PoCEleveo Quality Management Conversation events dynamically-determined object attributes
• CVE-2026-854091 PoCEleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal
• CVE-2026-854151 PoCAudio Player Block 1.1.0 - 1.6.2 - Contributor+ Stored XSS via Audio Download URL
• CVE-2026-854181 PoCOrbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget
• CVE-2026-854381 PoCMOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
• CVE-2026-855121 PoCSourceCodester Class and Exam Timetabling System session.php authorization
• CVE-2026-855131 PoCStackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
• CVE-2026-855141 PoCStackStorm st2 API Key auth.py privileges management
• CVE-2026-855161 PoCcode-projects Vehicle Management System busprofile.php sql injection
• CVE-2026-855171 PoCcode-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure
• CVE-2026-855201 PoCUnauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
• CVE-2026-855221 PoCvalkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds
• CVE-2026-855291 PoCIncorrect Authorization in GitLab
• CVE-2026-855301 PoCGiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
• CVE-2026-855681 PoCUnlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter
• CVE-2026-855691 PoCTutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification
• CVE-2026-855711 PoCTutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR
• CVE-2026-855721 PoCTutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure
• CVE-2026-855731 PoCAll in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG Upload
• CVE-2026-855741 PoCUnbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains
• CVE-2026-855761 PoCAll in One Files Upload for WooCommerce < 2.0.17 - Subscriber+ Arbitrary Plugin Settings Update
• CVE-2026-856361 PoCjofpin trape Login Endpoint stats.py missing authentication
• CVE-2026-856371 PoCjofpin trape Admin Endpoint sockets.py join_room missing authentication
• CVE-2026-856381 PoCjofpin trape user.py authorization
• CVE-2026-856391 PoCjofpin trape Telemetry Endpoint user.py race condition
• CVE-2026-856411 PoCFormidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter
• CVE-2026-856431 PoCcode-projects Online Shopping System adduser.php mysqli_query sql injection
• CVE-2026-856771 PoCGutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content
• CVE-2026-856781 PoCAI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
• CVE-2026-856801 PoCUltimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title
• CVE-2026-856811 PoCWP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update
• CVE-2026-856881 PoCTEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
• CVE-2026-857011 PoCramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication
• CVE-2026-857021 PoCramon-victor freegpt-webui Backend Conversation API backend.py _conversation missing authentication
• CVE-2026-857031 PoCramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources
• CVE-2026-857041 PoCramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition
• CVE-2026-8570618 PoCsKEVImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
• CVE-2026-857151 PoCExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion
• CVE-2026-857241 PoCMoquette pattern ACL wildcard injection allows cross-tenant authorization bypass
• CVE-2026-857311 PoCoras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
• CVE-2026-857321 PoCoras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing
• CVE-2026-857401 PoCLightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
• CVE-2026-857471 PoCDistribution: Client `manifests.Get()` does not verify returned content against requested digest
• CVE-2026-857691 PoCLibtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
• CVE-2026-858841 PoCWindows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
• CVE-2026-859841 PoCminiOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
• CVE-2026-859901 PoCLeantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods
• CVE-2026-859991 PoCSoup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)