773 PoCs | 119 CISA KEV

tag

Llm

Flowise CustomMCP Unauthenticated Remote Code Execution via Function() Constructor (CVE-2025-59528) EPSS 87%

CVE-2025-59528 web Patched

CVE-2025-59528webCRITICAL 10Patched2026-07-06OpenWebUI "Tools" Unsandboxed exec() Remote Code Execution — CVE-2026-0766 EPSS 26%

CVE-2026-0766 (ZDI-26-032, GHSA-cggw-334c-f4mj) web Unverified

CVE-2026-0766webHIGH 8.8Unverified2026-07-05