Weblate โ€” PoC Archivehttps://poc.intelseclab.com/tags/weblate/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Weblate Arbitrary File Read via ssh-keyscan Host Argument Injection โ€” CVE-2026-24126https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24126-weblate-ssh-keyscan-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24126-weblate-ssh-keyscan-file-read/High severity (CVSS 6.5) โ€” web ยท CVE-2026-24126. Status: PoC. Affects: Weblate (self-hosted translation platform). Tags: weblate, argument-injection, command-injection, ssh-keyscan, arbitrary-file-read, authenticated, python, cwe-88.webHighweblateargument-injectioncommand-injectionssh-keyscanarbitrary-file-readauthenticatedpythoncwe-88