773 PoCs | 119 CISA KEV

tag

Oauth2

Rocket.Chat OAuth2 NoSQL Injection Privilege Escalation — CVE-2026-29198

CVE-2026-29198 web Patched

CVE-2026-29198webCRITICALPatched2026-07-05PocketBase OAuth2 Account Pre-Hijacking (CVE-2026-44166)

CVE-2026-44166 / [GHSA-pq7p-mc74-g65w](https://github.com/pocketbase/pocketbase/security/advisories/GHSA-pq7p-mc74-g65w) web Patched

CVE-2026-44166 / [GHSA-pq7p-mc74-g65w]webMEDIUM 6.1Patched2026-07-05Gitea OAuth2 Scope Enforcement Bypass via HTTP Basic Auth — CVE-2026-28699

CVE-2026-28699 web Patched

CVE-2026-28699webHIGHPatched2026-07-05