Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,337cataloged exploits
39,873CVEs with public exploitation
24,696lab-tested
AllReferência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecentpopularrisk
4,511 exploits
Nucleicritical
Hermes WebUI < 0.51.788 - Remote Code Execution
CVE-2026-58123CRITICAL
Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API
43RISK
open ↗
Nucleicritical
Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution
CVE-2026-58138CRITICAL
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
68RISK
open ↗
Nucleimedium
Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting
CVE-2026-58191MEDIUM
Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
28RISK
open ↗
Nucleicritical
SiYuan <=3.7.2 - SQL Injection
CVE-2026-69085CRITICAL
SiYuan before v3.7.3 SQL Injection via searchDocs
43RISK
open ↗
Nucleicritical
Flowise < 3.1.3 - Remote Code Execution
CVE-2026-69251CRITICAL
Flowise RCE via TypeORM DataSource
43RISK
open ↗
Nucleicritical
Audiobookshelf - Authentication Bypass
CVE-2026-71209HIGH
audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal
36RISK
open ↗
Nucleicritical
Adobe Commerce/Magento - Customer Session Identity Switch
CVE-2026-71362CRITICALunder attack
Adobe Commerce | Incorrect Authorization (CWE-863)
100RISK
open ↗
Nucleicritical
Dokploy <= 0.29.12 - Authenticated RCE via Command Injection
CVE-2026-72867CRITICAL
Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)
63RISK
open ↗
Nucleicritical
Metabase - Unauthenticated SQL Injection
CVE-2026-72898CRITICALunder attack
Metabase SQL injection via password reset endpoint
100RISK
open ↗
Nucleicritical
DB-GPT <= 0.8.1 - Arbitrary File Write
CVE-2026-73034CRITICAL
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
63RISK
open ↗
Nucleihigh
Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation
CVE-2026-7467HIGH
Read More & Accordion <= 3.5.7 - Privilege Escalation via importData
36RISK
open ↗
Nucleicritical
Splunk Enterprise Patroni REST API - Missing Authentication RCE
CVE-2026-76268CRITICAL
Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise
63RISK
open ↗
Nucleicritical
Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass
CVE-2026-76460CRITICALunder attack
Cisco Identity Services Engine Authentication Bypass Vulnerability
100RISK
open ↗
Nucleicritical
GeoServer jsonArrayContains CQL Filter - SQL Injection
CVE-2026-76904CRITICAL
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
63RISK
open ↗
Nucleicritical
SPIP < 4.4.22 - Unauthenticated RCE
CVE-2026-77806CRITICAL
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August
63RISK
open ↗
Nucleimedium
WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF
CVE-2026-7798MEDIUM
FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter
28RISK
open ↗
Nucleihigh
Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret
CVE-2026-80099HIGH
Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret
56RISK
open ↗
Nucleicritical
Progress ADC LoadMaster - Command Injection
CVE-2026-8037CRITICALunder attack
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
100RISK
open ↗
Nucleicritical
Chef Automate API Gateway - Authentication Bypass
CVE-2026-80462CRITICAL
Privilege Escalation in Progress Chef Automate
43RISK
open ↗
Nucleicritical
dotCMS Core Publish Audit API - Unauthenticated SQL Injection
CVE-2026-8054CRITICAL
Unauthenticated SQL Injection in dotCMS Publish Audit API
63RISK
open ↗
Nucleihigh
WordPress weMail < 2.1.3 - Cross-Site Scripting
CVE-2026-8089HIGH
weMail < 2.1.3 - Reflected Cross-Site Scripting
56RISK
open ↗
Nucleimedium
MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure
CVE-2026-81199MEDIUM
MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route
48RISK
open ↗
Nucleicritical
PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-Direct
CVE-2026-81578HIGHunder attack
PaperCut MF/NG: Authentication Bypass
100RISK
open ↗
Nucleicritical
WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass
CVE-2026-8181CRITICAL
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
63RISK
open ↗
Nucleimedium
WordPress WPLP Cookie Consent < 4.4.2 - SQL Injection
CVE-2026-82186MEDIUM
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
48RISK
open ↗
Nucleicritical
GiveWP <= 4.16.7.1 - Remote Code Execution
CVE-2026-82222CRITICAL
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
63RISK
open ↗
Nucleicritical
JFrog Artifactory Access Blank Join Key Authentication Bypass
CVE-2026-82329CRITICALunder attack
Potential authentication bypass leading to administrative access in Artifactory
98RISK
open ↗
Nucleimedium
Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure
CVE-2026-8236MEDIUM
Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate for endpoint /ccm/system/dialogs/file/usage/{fID}
28RISK
open ↗
Nucleimedium
Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)
CVE-2026-8237MEDIUM
Concrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint
48RISK
open ↗
Nucleicritical
argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access
CVE-2026-82456CRITICAL
argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP
43RISK
open ↗
← previouspage 66 / 151next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.