Strapi โ€” PoC Archivehttps://poc.intelseclab.com/tags/strapi/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Strapi CMS Admin Account Takeover via Query Filter Bypass โ€” CVE-2026-27886https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27886-strapi-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27886-strapi-account-takeover/Critical severity โ€” web ยท CVE-2026-27886. Status: Weaponized. Affects: Strapi CMS (Content API). Tags: strapi, cms, account-takeover, password-reset, boolean-oracle, api-filter-bypass, authentication.webCriticalstrapicmsaccount-takeoverpassword-resetboolean-oracleapi-filter-bypassauthentication