773 PoCs | 119 CISA KEV

tag

Websocket

WebSocket Authentication Brute-Force via Missing Rate Limiting (CVE-2026-27778)

CVE-2026-27778 web Patched

CVE-2026-27778webMEDIUMPatched2026-07-05Red Hat Cockpit `logsJournal.jsx` Shell Injection RCE (CVE-2026-4802)

CVE-2026-4802 web Unpatched

CVE-2026-4802webHIGHUnpatched2026-07-05OpenClaw Gateway WebSocket Authentication Bypass RCE — CVE-2026-28466

CVE-2026-28466 network Patched

CVE-2026-28466networkCRITICALPatched2026-07-05GitLab WebSocket GraphqlChannel Unauthorized Method Enumeration — CVE-2026-5173

CVE-2026-5173 web Patched

CVE-2026-5173webHIGHPatched2026-07-05Next.js WebSocket Upgrade SSRF (Self-Hosted) (CVE-2026-44578) EPSS 39%

CVE-2026-44578 web Patched

CVE-2026-44578webHIGH 8.6Patched2026-05-17Fortinet FortiOS / FortiProxy Authentication Bypass (CVE-2024-55591) KEV RW EPSS 98%

CVE-2024-55591 (Fortinet FG-IR-24-535) web Unverified

CVE-2024-55591webCRITICAL 9.6Unverified2026-05-16