PoC Archive PoC Archive

tag

File-Write

  • CVE-2026-20200 / NSIDE-SA-2026-003 network CRITICAL 9.9

    Cisco IMC Argument Injection to Root RCE (CVE-2026-20200)

    CVE-2026-20200 is an argument injection vulnerability in Cisco IMC that allows an authenticated user to achieve root-level RCE. The Redfish API SSH key upload handler (ManagerAccount.UploadSSHKey) passes the KeyURI parameter to curl without sanitization. An…

    Patched 2026-08-16
  • CVE-2026-20230 network CRITICAL 8.6 KEV EPSS 83%

    Cisco Unified CM WebDialer SSRF to Arbitrary File Write / RCE (CVE-2026-20230)

    CVE-2026-20230 is a critical server-side request forgery vulnerability in Cisco Unified CM / Unified CM SME caused by improper input validation of HTTP requests processed by the WebDialer component. A remote unauthenticated attacker can chain unauthenticated…

    Unverified 2026-07-01
  • CVE-2026-20262 network MEDIUM 6.5 KEV EPSS 28%

    Cisco Catalyst SD-WAN Manager Arbitrary File Write (CVE-2026-20262)

    CVE-2026-20262 is an authenticated remote arbitrary file write vulnerability in the web UI of Cisco Catalyst SD-WAN Manager. Improper validation of user-supplied input during a file upload process enables path traversal, letting an authenticated attacker…

    Unverified 2026-07-01
  • CVE-2026-20253 web CRITICAL KEV EPSS 97%

    Splunk Enterprise Pre-Auth RCE via PostgreSQL Sidecar (CVE-2026-20253)

    CVE-2026-20253 is a critical unauthenticated RCE vulnerability in Splunk Enterprise arising from a missing authentication check on the PostgreSQL sidecar service endpoint /v1/postgres/recovery/backup. An unauthenticated attacker can reach this endpoint and…

    Patched 2026-06-28