https://poc.intelseclab.com/tags/cwe-942/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22812-opencode-unauth-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22812-opencode-unauth-rce/High severity (CVSS 8.8) — web · CVE-2026-22812 (GHSA-vxw4-wv6m-9hhh). Status: Weaponized. Affects: OpenCode (AI developer/coding agent tool) local HTTP server. Tags: opencode, unauthenticated-api, rce, localhost-server, cors, session-hijack, cwe-306, cwe-942.webHighopencodeunauthenticated-apircelocalhost-servercorssession-hijackcwe-306cwe-942