773 PoCs | 119 CISA KEV

tag

Preauth

nginx PCRE Capture Variable Heap Overflow to Pre-Auth RCE (CVE-2026-42533)

CVE-2026-42533 web Patched

CVE-2026-42533webCRITICAL 9.8Patched2026-08-16Citrix NetScaler ADC/Gateway -- Pre-Auth SAML PrefixList Heap Overflow to RCE (CVE-2026-8452) KEV

CVE-2026-8452 network Patched

CVE-2026-8452networkCRITICAL 9.8Patched2026-08-16GitLab Unauthenticated RCE via Workhorse Pre-Auth Upload into ExifTool DjVu Injection (CVE-2021-22205) KEV RW EPSS 100%

CVE-2021-22205 (chains CVE-2021-22204 in ExifTool) web Patched

CVE-2021-22205webCRITICAL 10Patched2026-08-09CyberPanel Pre-Auth Remote Code Execution via getresetstatus Command Injection (CVE-2024-51378) KEV RW EPSS 95%

CVE-2024-51378 web Patched

CVE-2024-51378webCRITICAL 10Patched2026-08-09Craft CMS Pre-Auth Remote Code Execution via Session Poisoning + Yii2 PhpManager Gadget (CVE-2025-32432) KEV EPSS 100%

CVE-2025-32432 web Patched

CVE-2025-32432webCRITICAL 10Patched2026-07-31