CVE-2026-91000 to CVE-2026-91999

76 CVEs with public proof-of-concept exploits.

• CVE-2026-910011 PoCD-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow
• CVE-2026-910021 PoCstamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication
• CVE-2026-910031 PoCD-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow
• CVE-2026-910041 PoCSourceCodester Online Faculty Clearance System delete_faculty1.php sql injection
• CVE-2026-910051 PoCSourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload
• CVE-2026-910081 PoCEvent Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel
• CVE-2026-910091 PoCActive Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment
• CVE-2026-910101 PoCInvisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion
• CVE-2026-910111 PoCEWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansion
• CVE-2026-910141 PoCRealtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint
• CVE-2026-910151 PoCMaster Addons for Elementor < 3.1.9 - Unauthenticated Popup Deactivation via jltma_popup_disable_expired
• CVE-2026-910161 PoCMotors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure
• CVE-2026-910171 PoCRobokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback
• CVE-2026-910191 PoCEvent Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure
• CVE-2026-910201 PoCWebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amount
• CVE-2026-910221 PoCMotors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color
• CVE-2026-910231 PoCMotors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured
• CVE-2026-910241 PoCBooking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)
• CVE-2026-910251 PoCBooking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR
• CVE-2026-910511 PoCEWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta
• CVE-2026-910721 PoCEWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler
• CVE-2026-910731 PoCSubscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form Setting
• CVE-2026-910741 PoCBSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute
• CVE-2026-910761 PoCRobokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed
• CVE-2026-910771 PoCEvent Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list
• CVE-2026-910781 PoCTillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN
• CVE-2026-910861 PoCGPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow
• CVE-2026-910871 PoCGPAC Compositor media_object.c gf_mo_get_od_id use after free
• CVE-2026-910891 PoCGPAC base_scenegraph.c gf_node_get_name_and_id use after free
• CVE-2026-910901 PoCGPAC base_scenegraph.c gf_node_activate_ex stack-based overflow
• CVE-2026-910911 PoCGPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption
• CVE-2026-911291 PoCHome Assistant: mDNS Server-Side Request Forgery
• CVE-2026-911301 PoCHome Assistant: XSS in Statistics Graph Card
• CVE-2026-911362 PoCsDivi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter
• CVE-2026-911431 PoCgoproxy through 15.3 Authentication Bypass via CONNECT
• CVE-2026-917371 PoCUse after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
• CVE-2026-917521 PoCGNU libextractor before 1.15 Stack Overflow via OLE2
• CVE-2026-917791 PoCGNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
• CVE-2026-917801 PoCGNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
• CVE-2026-917811 PoCGNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
• CVE-2026-917821 PoCGNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference
• CVE-2026-918271 PoCNinja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export
• CVE-2026-918281 PoCOMGF < 6.3.11 - Unauthenticated DoS via do_optimize
• CVE-2026-918291 PoCSubscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter
• CVE-2026-918301 PoCSubscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie
• CVE-2026-918321 PoCWP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF
• CVE-2026-918331 PoCWX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'attach' Parameter
• CVE-2026-918351 PoCOpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflict
• CVE-2026-918361 PoCOpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors
• CVE-2026-918421 PoCOpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization
• CVE-2026-918471 PoCBookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR
• CVE-2026-918481 PoCWuzhiCMS index.php getDataOfJson sql injection
• CVE-2026-918491 PoCWuzhiCMS Avatar Upload index.php setAvatar unrestricted upload
• CVE-2026-918531 PoCTOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection
• CVE-2026-918541 PoCcode-projects Record Management System reg.php cross site scripting
• CVE-2026-918551 PoCOpen5GS PFCP Message handler.c denial of service
• CVE-2026-919401 PoCcrawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy
• CVE-2026-919681 PoCvikunja before 2.6.0 Denial of Service via unbounded filter recursion
• CVE-2026-919691 PoCvikunja before 2.6.0 Resource Exhaustion via CSV Migration
• CVE-2026-919701 PoCVikunja before 2.6.0 Resource Exhaustion via Planka Migration
• CVE-2026-919711 PoCVikunja before 2.6.0 Denial of Service via Avatar Upload
• CVE-2026-919721 PoCVikunja before 2.6.0 Authentication Bypass via Unthrottled API
• CVE-2026-919731 PoCVikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuth
• CVE-2026-919791 PoCVikunja before 2.6.0 Denial of Service via Decompression Bomb
• CVE-2026-919801 PoCvikunja before 2.6.0 Team Enumeration via Project Share
• CVE-2026-919811 PoCVikunja before 2.6.0 User Enumeration via v2 API
• CVE-2026-919821 PoCVikunja before 2.6.0 TOTP Secret Disclosure via API
• CVE-2026-919831 PoCVikunja before 2.6.0 API Token Scope Bypass via expand Parameter
• CVE-2026-919841 PoCVikunja before 2.6.0 Broken Object-Level Authorization via task-position
• CVE-2026-919851 PoCVikunja before 2.6.0 Privilege Escalation via Link Share Hash
• CVE-2026-919931 PoCJpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list
• CVE-2026-919941 PoCSemaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests
• CVE-2026-919951 PoCpig before 4.1.0 Unverified Password Change via /register/password
• CVE-2026-919961 PoClamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint
• CVE-2026-919971 PoCevolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass
• CVE-2026-919981 PoCCasdoor through 4.4.0 Cross-Organization User Administration via /api/mcp