773 PoCs | 119 CISA KEV

tag

Idor

Langflow Responses API IDOR — Execute Another User's Flow (CVE-2026-55255) KEV

CVE-2026-55255 (GHSA-qrpv-q767-xqq2) web Patched

CVE-2026-55255webHIGH 8.4Patched2026-07-19WordPress Download Manager 3.3.5.2 — Unauthenticated IDOR (CVE-2026-39676)

CVE-2026-39676 web Unverified

CVE-2026-39676webMEDIUMUnverified2026-07-05Vaultwarden Organization Collection Permissions Bypass & Cipher Enumeration (CVE-2026-26012)

CVE-2026-26012 (GHSA-h265-g7rm-h337) web Patched

CVE-2026-26012webMEDIUM 6.5Patched2026-07-05Saleor GraphQL IDOR — Unauthenticated Order PII Exfiltration (CVE-2026-24136)

CVE-2026-24136 web Patched

CVE-2026-24136webHIGH 7.5Patched2026-07-05Eventin (wp-event-solution) Broken Access Control / IDOR (CVE-2026-40776)

CVE-2026-40776 / Patchstack PSID 85de025d71e7 web Patched

CVE-2026-40776 / Patchstack PSID 85de025d71e7webHIGH 7.5Patched2026-07-05AutoGPT Platform Chat Session IDOR / Session Hijack — CVE-2026-30950

CVE-2026-30950 (GHSA-q58p-v9r9-7gqj) web Patched

CVE-2026-30950webHIGH 7.1Patched2026-07-05