773 PoCs | 119 CISA KEV

tag

Request-Smuggling

Oracle E-Business Suite Pre-Authentication RCE Chain (CVE-2025-61882) KEV RW EPSS 100%

CVE-2025-61882 (Oracle Security Alert, out-of-band, October 2025) web Patched

CVE-2025-61882webCRITICAL 9.8Patched2026-08-09NGINX HTTP/2 Frame Injection via Vulnerable Upstream Proxying (CVE-2026-42926)

CVE-2026-42926 web Patched

CVE-2026-42926webHIGHPatched2026-07-05HAProxy HTTP/3 (QUIC) Standalone FIN Body Validation Bypass Leading to Request Smuggling — CVE-2026-33555

CVE-2026-33555 network Patched

CVE-2026-33555networkHIGHPatched2026-07-05nghttpx HTTP/1.1 Upgrade Request Body Response Queue Poisoning

None assigned as of 2026-07-03 network Patched

None assigned as of 2026-07-03networkHIGHPatched2026-07-03