Exploit Search

PoC Search Engine

AI Enriched

Search specific CVE exploits enriched with AI vulnerability analysis.

Found 31342 Vulnerabilities with Exploits
CVE-2026-54420 CISA KEV ACTIVE

Symlink Race in LiteSpeed cPanel Plugin

Severity HIGH
8.5

AI Intelligence Analysis

Target Stack LiteSpeed / cPanel plugin
<2.4.8
Impact Vector Privilege Escalation
Authentication Authenticated
CVE-2026-20262 CISA KEV ACTIVE

Cisco Catalyst SD-WAN Manager File Upload Leading to RCE

Severity MEDIUM
6.5

AI Intelligence Analysis

Target Stack Cisco / Catalyst SD-WAN Manager
Impact Vector RCE
Authentication Authenticated

Verified Exploits (1)

GitHub https://github.com/HORKimhab/CVE-2026-20262
CVE-2026-53519

Arbitrary File Read via Path Traversal

Severity CRITICAL
9.1

AI Intelligence Analysis

Target Stack Nezha Monitoring / Nezha Monitoring
<2.0.13
Impact Vector Information Disclosure
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/tar-xz/CVE-2026-53519-PoC
CVE-2026-48017

Authenticated RCE in DbGate

Severity HIGH
8.8

AI Intelligence Analysis

Target Stack DbGate / DbGate
<=7.1.8
Impact Vector RCE
Authentication Authenticated
CVE-2026-40776

Broken Access Control in WP Event SOlution

Severity HIGH
7.5

AI Intelligence Analysis

Target Stack WP Event Solution / WP Event SOlution
>=1.0 <=4.1.8
Impact Vector Broken Access Control
Authentication PRE-AUTH
CVE-2026-40791

Cross Site Scripting

Severity HIGH
7.1

AI Intelligence Analysis

Target Stack / WP Time Slots Booking Form
<=1.2.46
Impact Vector XSS
Authentication Authenticated
CVE-2026-36213

Privilege Escalation in Microvirt MEmu Android Emulator

Severity HIGH
7.8

AI Intelligence Analysis

Target Stack Microvirt / MEmu Android Emulator
=9.2.7.0
Impact Vector Privilege Escalation
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/sec-zone/CVE-2026-36213
CVE-2026-36670

Time-Based Blind SQL Injection in OpenSIPS Control Panel

Severity HIGH
8.8

AI Intelligence Analysis

Target Stack OpenSIPS / Control Panel
<9.3.3
Impact Vector SQLi
Authentication Authenticated
CVE-2026-38812

SQL Injection in RuoYi

Severity CRITICAL
9.8

AI Intelligence Analysis

Target Stack RuoYi / RuoYi
=4.8.2
Impact Vector SQLi
Authentication Authenticated
CVE-2026-10795

Authentication Bypass Leading to RCE

Severity HIGH
8.1

AI Intelligence Analysis

Target Stack UpdraftPlus / UpdraftPlus: WP Backup & Migration Plugin
<=1.26.4
Impact Vector Authentication Bypass, RCE
Authentication PRE-AUTH
CVE-2026-5513

Stored XSS in Bookly plugin for WordPress

Severity HIGH
7.2

AI Intelligence Analysis

Target Stack Bookly / Bookly plugin
<=27.2
Impact Vector XSS
Authentication PRE-AUTH
CVE-2026-53787

Unauthenticated Arbitrary File Upload

Severity CRITICAL
9.3

AI Intelligence Analysis

Target Stack Amasty / Order Attributes for Magento 2
<4.0.0
Impact Vector RCE
Authentication Authenticated
CVE-2025-67511

Command Injection in Cybersecurity AI (CAI) framework

Severity CRITICAL
9.6

AI Intelligence Analysis

Target Stack Cybersecurity AI / CAI framework
<=0.5.9
Impact Vector RCE
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/edoardottt/CVE-2025-67511
CVE-2026-0776

Uncontrolled Search Path Element in Discord Client

Severity HIGH
7.3

AI Intelligence Analysis

Target Stack Discord / Discord Client
Impact Vector Privilege Escalation
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/0x18F/CVE-2026-0776
CVE-2026-24136

IDOR in Saleor

Severity HIGH
8.7

AI Intelligence Analysis

Target Stack Saleor / Saleor
>= 3.2.0 <= 3.20.109 >= 3.21.0-a.0 <= 3.21.44 >= 3.22.0-a.0 <= 3.22.28
Impact Vector Information Disclosure
Authentication PRE-AUTH
CVE-2026-23111

Use-after-free in Linux kernel netfilter: nf_tables

Severity HIGH
7.8

AI Intelligence Analysis

Target Stack Linux / Linux kernel
Impact Vector Use-After-Free
Authentication PRE-AUTH
CVE-2026-22356

PHP Local File Inclusion in Automattic Jetpack CRM

Severity HIGH
7.5

AI Intelligence Analysis

Target Stack Automattic / Jetpack CRM
<=6.7.0
Impact Vector LFI
Authentication PRE-AUTH

Verified Exploits (1)

GitHub https://github.com/xxconi/CVE-2026-22356
CVE-2026-0023

Local Privilege Escalation in Android PackageInstallerService

Severity HIGH
7.8

AI Intelligence Analysis

Target Stack N/A / Android PackageInstallerService
Impact Vector Privilege Escalation
Authentication PRE-AUTH
CVE-2026-23921

Blind SQL Injection in CApiService.php

Severity HIGH
8.7

AI Intelligence Analysis

Target Stack Zabbix / Zabbix
Impact Vector SQLi
Authentication Authenticated
CVE-2026-34040

Authorization Bypass in Moby

Severity HIGH
8.8

AI Intelligence Analysis

Target Stack Moby / Moby
<29.3.1
Impact Vector Authorization Bypass
Authentication Authenticated
1 2 3 4 5