773 PoCs | 119 CISA KEV

tag

Exiftool

GitLab Unauthenticated RCE via Workhorse Pre-Auth Upload into ExifTool DjVu Injection (CVE-2021-22205) KEV RW EPSS 100%

CVE-2021-22205 (chains CVE-2021-22204 in ExifTool) web Patched

CVE-2021-22205webCRITICAL 10Patched2026-08-09Gotenberg 8.29.1 Unauthenticated ExifTool Metadata Key Injection RCE (CVE-2026-42589)

CVE-2026-42589 web Patched

CVE-2026-42589webCRITICAL 9.8Patched2026-07-05exiftool-vendored.js Argument Injection via Newline-Delimited Tag Names (CVE-2026-43893)

CVE-2026-43893 / GHSA-cw26-7653-2rp5 misc Patched

CVE-2026-43893 / GHSA-cw26-7653-2rp5miscHIGH 8.2Patched2026-07-05ExifTool Metadata Field Command Injection (macOS) — CVE-2026-3102

CVE-2026-3102 binary Patched

CVE-2026-3102binaryHIGHPatched2026-07-05