CVE-2026-86000 to CVE-2026-86999

201 CVEs with public proof-of-concept exploits.

• CVE-2026-860001 PoCSoup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
• CVE-2026-860031 PoCCoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
• CVE-2026-860381 PoClibp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID
• CVE-2026-860391 PoClibp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses
• CVE-2026-860431 PoCSkipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)
• CVE-2026-860491 PoCJupyter Server: 5xx request logging leaks token-bearing Referer header values
• CVE-2026-860606 PoCsKEVSSH session privilege manipulation via a crafted username in Mikrotik RouterOS
• CVE-2026-860621 PoCLightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
• CVE-2026-861591 PoCSourceCodester Online Voting System ajax.php save_user sql injection
• CVE-2026-861601 PoCSourceCodester Online Voting System ajax.php delete_voting sql injection
• CVE-2026-861611 PoCSourceCodester Online Voting System ajax.php delete_category sql injection
• CVE-2026-861621 PoCSourceCodester Online Voting System ajax.php login sql injection
• CVE-2026-861631 PoCitsourcecode Sales and Inventory System pro_del.php sql injection
• CVE-2026-861641 PoCitsourcecode Sales and Inventory System trans_view.php sql injection
• CVE-2026-861651 PoCTenda HG10 formURL buffer overflow
• CVE-2026-861661 PoCTenda HG10 Boa Web Server formWanRedirect buffer overflow
• CVE-2026-861671 PoCTenda HG10 Boa formgponConf os command injection
• CVE-2026-861681 PoCcode-projects Content Management System login.php sql injection
• CVE-2026-861701 PoCDefaultFuction CRM edit.php sql injection
• CVE-2026-861711 PoCDefaultFuction CRM delete.php sql injection
• CVE-2026-861721 PoCDefaultFuction CRM delete.php sql injection
• CVE-2026-861751 PoCNetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
• CVE-2026-861761 PoCNetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs
• CVE-2026-861771 PoCPterodactyl Panel before 1.14.1 Privilege Escalation via Schedule Tasks
• CVE-2026-861781 PoCPixelfed through 0.12.9 Unauthorized Story Access via API
• CVE-2026-861791 PoCcode-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure
• CVE-2026-861801 PoCcode-projects Task Management System In PHP Login index.php sql injection
• CVE-2026-861811 PoCcode-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting
• CVE-2026-861821 PoCdiem-project diem dmConsole actions.class.php executeCommand cross-site request forgery
• CVE-2026-861831 PoCdiem-project diem dmWidget BasedmWidgetActions.class.php authorization
• CVE-2026-862061 PoCAccess control filter bypass allows unauthorised access to APIs
• CVE-2026-862071 PoCAuthentication bypass leads to unauthorised access to N-central
• CVE-2026-862081 PoCSourceCodester Class and Exam Timetabling System delete_teacher.php sql injection
• CVE-2026-862091 PoCSourceCodester Class and Exam Timetabling System delete_user.php sql injection
• CVE-2026-862101 PoCSourceCodester Class and Exam Timetabling System delete_user_account.php sql injection
• CVE-2026-862111 PoCrabindralamsal inventory-management-system Login index.php sql injection
• CVE-2026-862121 PoCOpen5GS AMF/MME improper authorization
• CVE-2026-862131 PoCMstfakts College-Management-System Search university.php mysqli_query sql injection
• CVE-2026-862141 PoCMstfakts College-Management-System login.php improper authentication
• CVE-2026-862151 PoCMstfakts College-Management-System Logout server.php session expiration
• CVE-2026-862161 PoCcode-projects Hotel and Tourism Reservation in PHP details.php cross site scripting
• CVE-2026-862171 PoCcode-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure
• CVE-2026-862184 PoCsKEVpre-authentication remote code execution
• CVE-2026-862201 PoCSourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection
• CVE-2026-862211 PoCSourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection
• CVE-2026-862261 PoCProjectwolds Online Attendance System profile.php cross site scripting
• CVE-2026-862271 PoCvalkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds
• CVE-2026-862281 PoCJeecgBoot AiragModelController.java exportXls access control
• CVE-2026-862311 PoCmwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation
• CVE-2026-862321 PoCitsourcecode Sales and Inventory System sup_del.php sql injection
• CVE-2026-862331 PoCitsourcecode Sales and Inventory System us_del.php sql injection
• CVE-2026-862341 PoCitsourcecode Sales and Inventory System cust_transac.php add sql injection
• CVE-2026-862351 PoCitsourcecode Sales and Inventory System pos_transac.php add sql injection
• CVE-2026-862361 PoCitsourcecode Sales and Inventory System pro_transac.php add sql injection
• CVE-2026-862371 PoCopenagents-org openagents http.py test_default_model server-side request forgery
• CVE-2026-862382 PoCsprojectworlds Online Examination System Feedback Form feedback.php cross site scripting
• CVE-2026-862391 PoCliufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
• CVE-2026-862401 PoCliufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery
• CVE-2026-862411 PoCliufee FeehiCMS Cookie Validation main-local.php hard-coded key
• CVE-2026-862421 PoCUnauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds
• CVE-2026-862441 PoCFastAdmin User Controller User.php login cross site scripting
• CVE-2026-862451 PoCitsourcecode Sales and Inventory System sup_transac.php sql injection
• CVE-2026-862501 PoCh3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie
• CVE-2026-862601 PoCsfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
• CVE-2026-862611 PoCsfturing hosp_order Order Controller OrderController.java authorization
• CVE-2026-862621 PoCsfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
• CVE-2026-862631 PoCsfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
• CVE-2026-862641 PoCsfturing ssm_pro Order Endpoint OrderController.java cross site scripting
• CVE-2026-862651 PoCitsourcecode Sales and Inventory System us_transac.php sql injection
• CVE-2026-862671 PoCitsourcecode Information System Society Membership System check_student.php sql injection
• CVE-2026-862681 PoCitsourcecode School Management System User_Login.php sql injection
• CVE-2026-862691 PoCitsourcecode Sales and Inventory System emp_edit1.php sql injection
• CVE-2026-862701 PoCitsourcecode Sales and Inventory System settings_edit.php sql injection
• CVE-2026-862711 PoCFluentCMS PermissionManager.cs GetAccessible authorization
• CVE-2026-862731 PoCprojeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery
• CVE-2026-862741 PoCprojeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization
• CVE-2026-862751 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
• CVE-2026-862761 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
• CVE-2026-862771 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
• CVE-2026-862781 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
• CVE-2026-862791 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
• CVE-2026-862801 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
• CVE-2026-862811 PoCSourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery
• CVE-2026-862831 PoCMISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data
• CVE-2026-862851 PoCBookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control
• CVE-2026-862881 PoCModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds
• CVE-2026-862891 PoCOllama GGUF Decoder gguf.go readGGUFV1String integer overflow
• CVE-2026-862901 PoCSourceCodester Online Voting System ajax.php save_category sql injection
• CVE-2026-862911 PoCitsourcecode Sales and Inventory System us_edit1.php sql injection
• CVE-2026-862921 PoCSourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication
• CVE-2026-862931 PoCSourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication
• CVE-2026-862941 PoCSourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting
• CVE-2026-862951 PoCD-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
• CVE-2026-862961 PoCD-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
• CVE-2026-862971 PoCD-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
• CVE-2026-862981 PoCSourceCodester Class and Exam Timetabling System delete_subject.php sql injection
• CVE-2026-862991 PoCLinksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
• CVE-2026-863001 PoCTenda AC9 Web Management R7WebsSecurityHandler improper authentication
• CVE-2026-863011 PoCcode-projects Hospital Information System Patient Management editPatient.php cross site scripting
• CVE-2026-863021 PoCcode-projects Hospital Information System SQL Database Backup File his.sql information disclosure
• CVE-2026-863051 PoClight0011 cms Upload.class.php upload unrestricted upload
• CVE-2026-863061 PoClight0011 cms Cookie Helper UserModel.class.php improper authentication
• CVE-2026-863071 PoClight0011 cms cross-site request forgery
• CVE-2026-863081 PoClight0011 cms Debug Mode config.php information disclosure
• CVE-2026-863091 PoCitsourcecode Sales and Inventory System pro_searchfrm.php sql injection
• CVE-2026-863101 PoCitsourcecode Sales and Inventory System cust_edit1.php sql injection
• CVE-2026-863181 PoCjava-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow
• CVE-2026-863191 PoCjava-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption
• CVE-2026-863211 PoCjava-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery
• CVE-2026-863501 PoCApache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up
• CVE-2026-864061 PoCUser Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase
• CVE-2026-864071 PoCUser Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page
• CVE-2026-864261 PoCLibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
• CVE-2026-864441 PoCLearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
• CVE-2026-864451 PoCLearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax
• CVE-2026-864461 PoCLearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint
• CVE-2026-864471 PoCLearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax
• CVE-2026-864481 PoCLearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order
• CVE-2026-864491 PoCLearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API
• CVE-2026-864751 PoCAppointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment Submission
• CVE-2026-865091 PoCD-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
• CVE-2026-865101 PoCD-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write
• CVE-2026-865111 PoCjava-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
• CVE-2026-865121 PoCjava-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control
• CVE-2026-865131 PoCjava-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
• CVE-2026-865141 PoCvgmstream txth-txtp txth.c sscanf stack-based overflow
• CVE-2026-865151 PoCvgmstream txtp txtp_parser.c add_entry resource consumption
• CVE-2026-865171 PoCitsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection
• CVE-2026-865181 PoCcode-projects Student Crud Operation edit.php sql injection
• CVE-2026-865191 PoCcode-projects Student Crud Operation Backup File card_activation.sql information disclosure
• CVE-2026-865471 PoCmrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER
• CVE-2026-865911 PoCBotiga Pro < 1.6.5 - Unauthenticated Arbitrary Blog Options Update via Templates Builder REST Route
• CVE-2026-866011 PoCWP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment Content
• CVE-2026-866021 PoCWP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_preview
• CVE-2026-866031 PoCWP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_lists
• CVE-2026-866041 PoCGTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translation
• CVE-2026-866081 PoCWP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta Insertion
• CVE-2026-866091 PoCDownload Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription
• CVE-2026-866101 PoCDownload Manager < 3.3.71 - Author+ Stored XSS via Package Icon
• CVE-2026-866121 PoCNinja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data Source
• CVE-2026-866441 PoCstar7th showdoc API Page Save Endpoint editormd.js cross site scripting
• CVE-2026-866651 PoCaircheng-org iWebShop-5 update.php index authorization
• CVE-2026-866661 PoCaircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
• CVE-2026-866671 PoCaircheng-org iWebShop-5 member.php member_list sql injection
• CVE-2026-866681 PoCaircheng-org iWebShop-5 pic.php uploadFile cross site scripting
• CVE-2026-866691 PoCaircheng-org iWebShop-5 systemseller.php login improper authentication
• CVE-2026-866701 PoCaircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
• CVE-2026-866721 PoCningzichun Student Management System Backup example.7z information disclosure
• CVE-2026-866731 PoCningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials
• CVE-2026-866741 PoCningzichun Student Management System login.php session_start session fixiation
• CVE-2026-866751 PoCitsourcecode Sales and Inventory System us_edit.php sql injection
• CVE-2026-867061 PoCQuick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update
• CVE-2026-867071 PoCPrivate Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter
• CVE-2026-867091 PoCThe Pressengine <= 1.0 - Unauthenticated Authentication Bypass
• CVE-2026-867101 PoCLogin with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter
• CVE-2026-867161 PoCCesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow
• CVE-2026-867171 PoCInsurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup
• CVE-2026-867761 PoCKeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
• CVE-2026-867791 PoCVisualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
• CVE-2026-867801 PoCFeatured Image with URL < 1.0.6 - Contributor+ Stored XSS via Image Alt Text
• CVE-2026-867811 PoCSSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure
• CVE-2026-867821 PoCVisualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
• CVE-2026-867831 PoCPostX < 5.0.41 - Unauthenticated Custom Field Key Disclosure via REST API
• CVE-2026-867841 PoCVisualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source
• CVE-2026-867851 PoCSocial Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update
• CVE-2026-867861 PoCSlider Pro <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro_multiple_images
• CVE-2026-867871 PoCAffiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive
• CVE-2026-867881 PoCHT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline Tag
• CVE-2026-867891 PoCConnections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes
• CVE-2026-867901 PoCWP Highlight Box <= 1.0 - Contributor+ Stored XSS via highlight-box Shortcode
• CVE-2026-867961 PoCWP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters
• CVE-2026-867971 PoCPricing Table Block 1.0.7 - 2.1.4 - Contributor+ Stored XSS via Pricing Link
• CVE-2026-867981 PoCHootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint
• CVE-2026-867991 PoCForms < 3.0.2 - Unauthenticated Stored XSS via Form Submission
• CVE-2026-868001 PoCWP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check
• CVE-2026-868011 PoCTo Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload Handler
• CVE-2026-868021 PoCTo Do List Member 1.4 - 1.6 - Unauthenticated Content Injection via Import
• CVE-2026-868081 PoCmoltis-org moltis vault.rs vault_recovery_handler missing authentication
• CVE-2026-868091 PoCPersian Elementor < 2.8.2 - Unauthenticated ZarinPal Payment Callback Authority Bypass
• CVE-2026-868121 PoCWPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API
• CVE-2026-868131 PoCMetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To
• CVE-2026-868141 PoCUsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email
• CVE-2026-868151 PoCBackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes
• CVE-2026-868161 PoCWPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API
• CVE-2026-868171 PoCFive Star Business Profile and Schema 2.3.20 - 2.3.21 - Author+ Sensitive Data Disclosure via Schema Field Default Callback
• CVE-2026-868231 PoCNewsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter
• CVE-2026-868241 PoCNewsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key
• CVE-2026-868261 PoCBackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX
• CVE-2026-868271 PoCBackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php
• CVE-2026-868281 PoCBackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback
• CVE-2026-868321 PoCMetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API
• CVE-2026-868331 PoCMetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes
• CVE-2026-868341 PoCMetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration
• CVE-2026-868371 PoCBookly < 28.3 - Unauthenticated Customer PII Update via Verification Bypass
• CVE-2026-868381 PoCBookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation
• CVE-2026-868391 PoCBookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR
• CVE-2026-868411 PoCBookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options
• CVE-2026-868421 PoCReal3D Flipbook Lite < 5.4 - Author+ Content Deletion and Stored XSS via Global Settings Overwrite
• CVE-2026-868501 PoCSKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation Deletion
• CVE-2026-868511 PoCLivees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note Injection & Order Key Disclosure
• CVE-2026-869504 PoCsKEVAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS…