773 PoCs | 119 CISA KEV

tag

Cwe-290

Gitea Docker Image Reverse-Proxy Authentication Bypass — "One Header, Any User" (CVE-2026-20896)

CVE-2026-20896 (GHSA-f75j-4cw6-rmx4) web Patched

CVE-2026-20896webCRITICAL 9.8Patched2026-07-11JAY Login & Register "Switch Back" Cookie Authentication Bypass (CVE-2025-14440)

CVE-2025-14440 web Unverified

CVE-2025-14440webCRITICAL 9.8Unverified2026-07-06phpSysInfo IP Allowlist Bypass via X-Forwarded-For Spoofing — CVE-2026-55584

CVE-2026-55584 / GHSA-786w-p5pm-cvgh web Patched

CVE-2026-55584 / GHSA-786w-p5pm-cvghwebHIGH 7.5Patched2026-07-05LiteLLM Proxy Unauthenticated Auth Bypass via Host-Header Route Confusion (CVE-2026-49468)

CVE-2026-49468 web Patched

CVE-2026-49468webCRITICAL 9.8Patched2026-07-05