Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Featured AI POCs

Top 50 recently published CVEs with comprehensive Shenlong AI analysis. Each entry includes vulnerability mechanism, trigger conditions, exploit chain, and reproducible POC. Free users get 3 free unlocks per month. JSON

CVE-2026-15416 High CVSS 8.9
Argo-cd: argo cd unauthenticated remote code execution in repo-server via genera
argoproj / argo-helm
CVE-2026-61875 High CVSS 8.8
luci-app-upnp Stored XSS via UPnP Port Mapping Description
openwrt / luci
CVE-2026-59260 High CVSS 8.8
OpenWrt luci-app-samba4 read ACL remote code execution via smbd
openwrt / luci
CVE-2026-61876 High CVSS 8.8
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
openwrt / luci
CVE-2026-49970 High CVSS 8.8
Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()
plank / laravel-mediable
CVE-2026-61463 High CVSS 8.8
Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account
go-shiori / shiori
CVE-2026-49972 High CVSS 8.8
Laravel-Mediable < 7.0.0 File Upload RCE via Extension Bypass
plank / laravel-mediable
CVE-2026-55772 High CVSS 8.8
CedarJava has a type confusion vulnerability
cedar-policy / cedar-java
CVE-2026-55773 High CVSS 8.8
CedarJava has a policy injection vulnerability
cedar-policy / cedar-java
CVE-2026-55771 High CVSS 8.8
CedarJava has policy injection, type confusion, and incorrect equality compariso
cedar-policy / cedar-java
CVE-2026-57855 High CVSS 8.8
Cockpit CMS Missing Authorization in Bucket File Storage API
Cockpit HQ / Cockpit CMS
CVE-2026-57856 High CVSS 8.8
Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API
Cockpit HQ / Cockpit CMS
CVE-2026-15696 High CVSS 8.8
Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow
Tenda / BE12 Pro
CVE-2026-15692 High CVSS 8.8
Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow
Tenda / BE12 Pro
CVE-2026-15693 High CVSS 8.8
Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow
Tenda / BE12 Pro
CVE-2026-15691 High CVSS 8.8
Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow
Tenda / BE12 Pro
CVE-2026-15694 High CVSS 8.8
Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow
Tenda / BE12 Pro
CVE-2026-15695 High CVSS 8.8
Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow
Tenda / BE12 Pro
CVE-2026-50130 High CVSS 8.8
Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/
pi-hole / pi-hole
CVE-2026-59733 High CVSS 8.8
rclone `serve restic --private-repos` authorization bypass: `..` in the URL path
rclone / rclone
CVE-2026-57996 High CVSS 8.8
phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoin
phpMyFAQ / phpMyFAQ
CVE-2026-58655 High CVSS 8.8
Grav Flex Objects - Server-Side Template Injection via Dynamic Titles
getgrav / grav
CVE-2026-61457 High CVSS 8.8
Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass
getgrav / grav
CVE-2026-55242 High CVSS 8.8
ERPNext: Server-Side Template Injection (SSTI) in Batch autonaming via Stock Set
frappe / erpnext
CVE-2026-61462 High CVSS 8.6
mcp-gitlab Path Traversal via job_id Parameter
zereight / mcp-gitlab
CVE-2026-62242 High CVSS 8.6
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration
codecentric / spring-boot-admin
CVE-2026-15720 High CVSS 8.6
Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler
open5gs / open5gs
CVE-2026-61436 High CVSS 8.6
PraisonAI before 4.6.78 Missing Webhook Signature Verification
MervinPraison / PraisonAI
CVE-2026-61836 High CVSS 8.6
Directus: Authorization-dependent response served from unsegmented cache key
directus / directus
CVE-2026-15738 High CVSS 8.5
Cross-namespace traffic interception via incorrect route precedence ordering in
Amazon / aws-load-balancer-controller
CVE-2026-61430 High CVSS 8.5
PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl
MervinPraison / PraisonAI
CVE-2026-61446 High CVSS 8.4
PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery
MervinPraison / PraisonAI
CVE-2026-56241 High CVSS 8.3
Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right
Capgo / Capgo
CVE-2026-15736 High CVSS 8.3
Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-
Snowflake / Snowflake SQLAlchemy
CVE-2026-56400 High CVSS 8.3
open-webui - Remote Code Execution via CORS Misconfiguration and Session Validat
open-webui / open-webui
CVE-2026-47158 High CVSS 8.3
Vaultwarden: CSRF in SSO Authorization Flow
dani-garcia / vaultwarden
CVE-2026-56259 High CVSS 8.2
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Res
Crawl4AI / Crawl4AI
CVE-2026-58500 High CVSS 8.2
MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGenerato
appium / appium-mcp
CVE-2026-59197 High CVSS 8.2
Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer
python-pillow / Pillow
CVE-2026-47423 High CVSS 8.2
DOMPurify XSS via `selectedcontent` re-clone
cure53 / DOMPurify
CVE-2026-61435 High CVSS 8.2
PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing
MervinPraison / PraisonAI
CVE-2026-56313 High CVSS 8.1
Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint
Capgo / Capgo
CVE-2026-61873 High CVSS 8.1
Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename
getgrav / grav
CVE-2026-61443 High CVSS 8.1
PraisonAI before 1.6.78 Remote Code Execution via SkillTools
MervinPraison / PraisonAI
CVE-2026-7162 High CVSS 7.8
WinFsp WinFSP 数字错误漏洞
WinFsp / WinFsp
CVE-2026-15506 High CVSS 7.8
SecureAge CatchPulse Driver saappctl.sys heap-based overflow
SecureAge / CatchPulse
CVE-2026-61433 High CVSS 7.8
PraisonAI before 4.6.78 Code Injection via API deployment generator
MervinPraison / PraisonAI
CVE-2026-15809 High CVSS 7.8
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via
Red Hat / Red Hat OpenShift Container Platform 4.12
CVE-2026-46709 High CVSS 7.8
Tabby: Drag-and-drop path injection still allows RCE via shell command substitut
Eugeny / tabby
CVE-2026-61520 High CVSS 7.7
Simple Machines Forum SSRF via image proxy
SimpleMachines / SMF

📥 Want the latest list as JSON? /api/featured-pocs.json

Open repo: github.com/imfht/cve-cn — README auto-generated weekly from this list.