CVE-2026-96000 to CVE-2026-96999

64 CVEs with public proof-of-concept exploits.

• CVE-2026-961731 PoCPayments for Hubtel < 1.0.2 - Unauthenticated Order Key Disclosure via IDOR
• CVE-2026-962001 PoCPayments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment Callback
• CVE-2026-962271 PoCPiotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
• CVE-2026-962551 PoCPayments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug Log
• CVE-2026-962571 PoCFast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow
• CVE-2026-962581 PoConSite internet GmbH Auktion NG Auktionssoftware Public Password Reset Endpoint forgotpasswd.html cross site scripting
• CVE-2026-962721 PoCClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
• CVE-2026-963491 PoCWordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability
• CVE-2026-964512 PoCsWordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability
• CVE-2026-965122 PoCsSudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization
• CVE-2026-965131 PoCNeethuharii CafeManagement AddProductCode.php unrestricted upload
• CVE-2026-965141 PoCNeethuharii CafeManagement Login CafePortalLogin.php sql injection
• CVE-2026-965151 PoCCommand Injection Vulnerability in Netlink ICT HG323RW Router
• CVE-2026-965241 PoCMCP Server for WordPress < 1.8.2 - Administrator Account Creation via CSRF
• CVE-2026-965251 PoCMCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership Check
• CVE-2026-965261 PoCMCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route
• CVE-2026-965301 PoCOptimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget
• CVE-2026-965311 PoCOptimole 4.0.0 - 4.2.12 - Author+ Stored XSS via Video Player Block
• CVE-2026-965321 PoCTestimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update
• CVE-2026-965331 PoCTestimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL
• CVE-2026-965341 PoCModern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export
• CVE-2026-965371 PoCTutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite
• CVE-2026-965481 PoCsfturing hosp_order jdbc.properties hard-coded credentials
• CVE-2026-965491 PoCsfturing hosp_order CommonUserServiceImpl.java cleartext storage
• CVE-2026-965501 PoCsfturing hosp_order MailUtil.java getProperties cleartext transmission
• CVE-2026-965511 PoCsfturing hosp_order CommonUserController.java cross-site request forgery
• CVE-2026-965521 PoCsfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
• CVE-2026-965561 PoCNeethuharii CafeManagement AddCashierCode.php addcashier improper authorization
• CVE-2026-966011 PoCAbdurrab5 online-makeup-store Admin Login index.php sql injection
• CVE-2026-966021 PoCAbdurrab5 online-makeup-store Customer Login customerSignin.php sql injection
• CVE-2026-966031 PoCAbdurrab5 online-makeup-store Admin functions.php confirm_user authorization
• CVE-2026-966041 PoCSoftNews Media Group DataLife Engine Search search.php strip_data sql injection
• CVE-2026-966521 PoCPlex Media Server SSRF
• CVE-2026-966541 PoCPlex Media Server URL injection
• CVE-2026-966551 PoCPlex Media Server arbitrary-host SSRF
• CVE-2026-966561 PoCPlex Media Server arbitrary file write
• CVE-2026-966761 PoCFast FAC1900R uhttpd get_alias_name stack-based overflow
• CVE-2026-966781 PoCweiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal
• CVE-2026-966801 PoCByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization
• CVE-2026-967391 PoCSEMCMS KindEditor Upload upload_json.php cross site scripting
• CVE-2026-967601 PoCAuthlib library contains a signature‑verification bypass vulnerability
• CVE-2026-967621 PoCkvcache-ai mooncake RPC Path UnmountSegment authorization
• CVE-2026-967631 PoCkvcache-ai mooncake MountSegment Request Processing segment.cpp access control
• CVE-2026-967641 PoCkvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources
• CVE-2026-967701 PoCs2s-proxy accepts untrusted client certificates
• CVE-2026-967721 PoCIntelliants Subrion CMS actions.json assign-owner information disclosure
• CVE-2026-967731 PoCIntelliants Subrion CMS Login Page login.php authorize redirect
• CVE-2026-967771 PoCForma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection
• CVE-2026-968101 PoChuanzi-qch base-admin Add User CommonController.java save cross site scripting
• CVE-2026-968801 PoCTaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization
• CVE-2026-968811 PoCTaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization
• CVE-2026-968821 PoCTaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization
• CVE-2026-968861 PoCCourse Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export
• CVE-2026-968891 PoCLibrsvg: use-after-free when xml includes have duplicated entities
• CVE-2026-968921 PoCEdimax BR-6428nC goform websRedirect redirect
• CVE-2026-968951 PoCWP YouTube Lyte < 1.7.31 - Contributor+ Stored XSS via Embed Block Attributes
• CVE-2026-968961 PoCMalcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request
• CVE-2026-968971 PoCOptima Express 8.5.0 - 8.7.5 - Unauthenticated Author Account Creation & Application Password Rotation via ihf_clear_cache
• CVE-2026-968981 PoCyhx070424 ShopXO Ueditor Upload ueditor.php path traversal
• CVE-2026-968991 PoCOptima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script
• CVE-2026-969001 PoCCart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDOR
• CVE-2026-969041 PoCAWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page
• CVE-2026-969401 PoCMicrosoft Exchange Server Elevation of Privilege Vulnerability
• CVE-2026-969621 PoCPie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code