773 PoCs | 119 CISA KEV

tag

Exfiltration

Immich Stored XSS to API Key Exfiltration and Account Hijacking (CVE-2026-35455)

CVE-2026-35455 web Patched

CVE-2026-35455webHIGHPatched2026-07-05Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316

CVE-2026-54316 (GHSA-fg94-h982-f3mm) misc Patched

CVE-2026-54316miscMEDIUMPatched2026-07-05