773 PoCs | 119 CISA KEV

tag

Authentication

YAMCS Missing Rate Limiting on Authentication Endpoint (CVE-2026-44596)

CVE-2026-44596 / GHSA-w5r6-mcgq-7pq4 web Patched

CVE-2026-44596 / GHSA-w5r6-mcgq-7pq4webMEDIUM 5.3Patched2026-07-05WebSocket Authentication Brute-Force via Missing Rate Limiting (CVE-2026-27778)

CVE-2026-27778 web Patched

CVE-2026-27778webMEDIUMPatched2026-07-05Vendure GraphQL Admin API Authentication Timing Attack / User Enumeration (CVE-2026-25050)

CVE-2026-25050 web Patched

CVE-2026-25050webMEDIUMPatched2026-07-05Strapi CMS Admin Account Takeover via Query Filter Bypass — CVE-2026-27886

CVE-2026-27886 web Patched

CVE-2026-27886webCRITICALPatched2026-07-05