PoC Archive PoC Archive

tag

Cross-Tenant

Apache Polaris — Cross-Tenant Credential Vending Before Location Validation in Iceberg REST Register (CVE-2026-64640)
CVE-2026-64640 cloud Patched
CVE-2026-64640cloudHIGH 8.1Patched2026-08-09Langflow Responses API IDOR — Execute Another User's Flow (CVE-2026-55255) KEV
CVE-2026-55255 (GHSA-qrpv-q767-xqq2) web Patched
CVE-2026-55255webHIGH 8.4Patched2026-07-19