AI Enriched PoC Intelligence

CVE-2026-64564

Linux Kernel SCTP Use-After-Free Vulnerability

Severity CRITICAL

9.8

AI Intelligence Analysis

Target Stack Linux Foundation / Linux Kernel

Impact Vector Use-After-Free

Authentication Authenticated

Verified Exploits (3)

GitHub https://github.com/suominen/sctphantom

GitHub https://github.com/HackSpeak/CVE-2026-64564

GitHub https://github.com/ethanolgolf/CVE-2026-64564

CVE-2026-64638

Pre-auth Reflected XSS in WordPress Login Screen

Severity HIGH

8.9

AI Intelligence Analysis

Target Stack WordPress / WordPress

<7.0.3

Impact Vector XSS

Authentication Authenticated

Verified Exploits (9)

GitHub https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-

GitHub https://github.com/Linuxhackingid-official/XSS2Shell-CVE-2026-64638

GitHub https://github.com/HackSpeak/CVE-2026-64638

GitHub https://github.com/wordsec/XSS2Shell

GitHub https://github.com/renzi25031469/CVE-2026-64638-WordPress-Core-XSS2Shell

GitHub https://github.com/0xBlackash/CVE-2026-64638

GitHub https://github.com/5yu4n/CVE-2026-64638

GitHub https://github.com/686f6c61/POC-WP-XSS2Shell-CVE-2026-64638

GitHub https://github.com/Boreas37/CVE-2026-64638-PoC

CVE-2026-1010

Stored XSS in Altium Workflow Engine

Severity HIGH

8.0

AI Intelligence Analysis

Target Stack Altium / Workflow Engine

Impact Vector XSS

Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-23001

Possible UAF in Linux macvlan_forward_source()

Severity HIGH

7.8

AI Intelligence Analysis

Target Stack Linux kernel / macvlan

Impact Vector UAF

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle-

CVE-2026-23010

Use-after-free in Linux IPv6 address deletion

Severity HIGH

7.8

AI Intelligence Analysis

Target Stack Linux kernel / ipv6

Impact Vector UAF

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23003

Uninitialized Value Read in Linux ip6_tunnel

Severity HIGH

7.5

AI Intelligence Analysis

Target Stack Linux kernel / ip6_tunnel

Impact Vector Information Disclosure

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23004

Use-after-free in Linux dst rt6_uncached_list_del()

Severity HIGH

7.8

AI Intelligence Analysis

Target Stack Linux kernel / dst

Impact Vector UAF

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-26190

Authentication bypass and unauthenticated API access in Milvus

Severity CRITICAL

9.8

AI Intelligence Analysis

Target Stack Milvus / Milvus

<2.5.27 <2.6.10

Impact Vector Authentication Bypass

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/qianlijaingshan/milvus-auth-audit

CVE-2026-15038

Unauthenticated Remote Code Execution (RCE) via Session Hijacking in InfiniteWP Client

Severity UNKNOWN

0.0

AI Intelligence Analysis

Target Stack InfiniteWP / InfiniteWP Client

<1.13.6

Impact Vector RCE

Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/Polosss/By-Poloss..-..CVE-2026-15038-POC

CVE-2026-2020

PHP Object Injection

Severity HIGH

7.5

AI Intelligence Analysis

Target Stack JS Archive List / JS Archive List plugin

<=6.1.7

Impact Vector PHP Object Injection

Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-21005

Path traversal allows arbitrary file overwrite by adjacent attackers

Severity HIGH

7.1

AI Intelligence Analysis

Target Stack Smart Switch / Smart Switch

<3.7.69.15

Impact Vector Path Traversal

Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-32621

Apollo Federation Gateway Object.prototype Pollution

Severity CRITICAL

9.9

AI Intelligence Analysis

Target Stack Apollo Federation / Apollo Federation

<2.9.6 <2.10.5 <2.11.6 <2.12.3 <2.13.2

Impact Vector Object.prototype Pollution

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/sam00/POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

CVE-2026-23489

GLPI Fields Plugin PHP Code Execution

Severity CRITICAL

9.1

AI Intelligence Analysis

Target Stack Fields / Fields

<1.23.3

Impact Vector RCE

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/eorll-lgtm/poc-CVE-2026-23489

CVE-2026-4444

Stack buffer overflow in WebRTC

Severity HIGH

8.8

AI Intelligence Analysis

Target Stack Google / Chrome

<146.0.7680.153

Impact Vector RCE

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection

CVE-2026-4567

Stack-based Buffer Overflow in Tenda A15

Severity HIGH

8.9

AI Intelligence Analysis

Target Stack Tenda / A15

=15.13.07.13

Impact Vector Buffer Overflow

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

CVE-2026-27912

Improper Authorization in Windows Kerberos

Severity HIGH

8.0

AI Intelligence Analysis

Target Stack Microsoft / Windows Kerberos

Impact Vector EoP

Authentication Authenticated

Verified Exploits (2)

GitHub https://github.com/Semperis-Community/ResetNightmare

GitHub https://github.com/mihat2/ResetNightmare-impacket

CVE-2026-5050

Improper Verification of Cryptographic Signature in Redsys & WooCommerce Lite

Severity HIGH

7.5

AI Intelligence Analysis

Target Stack WordPress / Payment Gateway for Redsys & WooCommerce Lite plugin

<=7.0.0

Impact Vector Authorization Bypass

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

CVE-2026-22010

Oracle Financial Services Data Confidentiality Vulnerability

Severity HIGH

7.5

AI Intelligence Analysis

Target Stack Oracle / Oracle Financial Services Analytical Applications Infrastructure (Platform Component)

~8.0.7.9 ~8.0.8.7 ~8.1.2.5

Impact Vector Data Confidentiality

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

CVE-2026-22011

Oracle E-Business Suite ADPatch Takeover Vulnerability

Severity HIGH

7.6

AI Intelligence Analysis

Target Stack Oracle / Oracle Applications DBA (ADPatch Component)

>=12.2.3 <=12.2.15

Impact Vector Takeover

Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22016

Unauthorized Data Access in Oracle Java SE and GraalVM (JAXP)

Severity HIGH

7.5

AI Intelligence Analysis

Target Stack Oracle / Java SE, GraalVM for JDK, GraalVM Enterprise Edition

==8u481 ==8u481-b50 ==8u481-perf ==11.0.30 ==17.0.18 ==21.0.10 ==25.0.2 ==26 ==21.3.17

Impact Vector Data Exposure

Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/George0Papasotiriou/CVE-2026-22016-IPFS-CID-Spoofing-via-Multihash-Length-Extension

PoC Search Engine

AI Intelligence Analysis

Verified Exploits (3)

AI Intelligence Analysis

Verified Exploits (9)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (2)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

AI Intelligence Analysis

Verified Exploits (1)

Don't Miss Critical Exploits