773 PoCs | 119 CISA KEV

tag

Self-Hosted

Gitea — diffpatch API Git Hook Remote Code Execution (CVE-2026-60004) KEV EPSS 85%

CVE-2026-60004 web Patched

CVE-2026-60004webHIGH 8.8Patched2026-08-09Vaultwarden Organization Collection Permissions Bypass & Cipher Enumeration (CVE-2026-26012)

CVE-2026-26012 (GHSA-h265-g7rm-h337) web Patched

CVE-2026-26012webMEDIUM 6.5Patched2026-07-05Unauthenticated SSRF in Ech0 via /api/website/title (CVE-2026-35037)

CVE-2026-35037 web Patched

CVE-2026-35037webHIGHPatched2026-07-05OliveTin OS Command Injection via Shell Mode Arguments (CVE-2026-27626)

CVE-2026-27626 / GHSA-49gm-hh7w-wfvf web Unverified

CVE-2026-27626 / GHSA-49gm-hh7w-wfvfwebCRITICAL 9.9Unverified2026-07-05Gogs Admin User Edit CSRF to Git Hook RCE

None assigned as of 2026-07-03 web Unverified

None assigned as of 2026-07-03webCRITICALUnverified2026-07-03Next.js WebSocket Upgrade SSRF (Self-Hosted) (CVE-2026-44578) EPSS 39%

CVE-2026-44578 web Patched

CVE-2026-44578webHIGH 8.6Patched2026-05-17Next.js Image Optimization API OOM DoS (Self-Hosted) (CVE-2026-44577)

CVE-2026-44577 web Patched

CVE-2026-44577webMEDIUM 5.9Patched2026-05-17