773 PoCs | 119 CISA KEV

tag

Cors

Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)

CVE-2026-34227 (GHSA-6fpf-248c-m7wm) web Unverified

CVE-2026-34227webHIGHUnverified2026-07-05Realtime Collaboration Platform — CORS Misconfiguration Leading to Authenticated Data Exposure (CVE-2026-27579)

CVE-2026-27579 (GHSA-qh5m-p8jh-hx88) web Unverified

CVE-2026-27579webHIGH 7.4Unverified2026-07-05OpenCode Unauthenticated Local HTTP Server -> Remote Code Execution (CVE-2026-22812) EPSS 17%

CVE-2026-22812 (GHSA-vxw4-wv6m-9hhh) web Patched

CVE-2026-22812webHIGH 8.8Patched2026-07-05Nhost Local MCP Server Unauthenticated CORS Bypass Leading to Full Project Takeover (CVE-2026-34200)

CVE-2026-34200 (GHSA-6c5x-3h35-vvw2) web Patched

CVE-2026-34200webCRITICAL 9.6Patched2026-07-05