773 PoCs | 119 CISA KEV

tag

Huggingface

LLaMA-Factory WebUI Remote Code Execution via Hardcoded `trust_remote_code` (CVE-2026-58116)

CVE-2026-58116 web Patched

CVE-2026-58116webCRITICAL 9.8Patched2026-07-19Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316

CVE-2026-54316 (GHSA-fg94-h982-f3mm) misc Patched

CVE-2026-54316miscMEDIUMPatched2026-07-05AI Model-Loader `trust_remote_code` Order-of-Operations RCE Simulation (CVE-2026-22807)

CVE-2026-22807 misc Patched

CVE-2026-22807miscHIGHPatched2026-07-05