Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2026

375 records · 23 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 3 of 4

  • CVE-2026-46333
    40Plan

    ptrace: slightly saner 'get_dumpable()' logic

    HighCVSS 7.1WeaponizedEPSS 4%

    linux · linux kernelMay 15, 2026

  • CVE-2026-35194
    32Monitor

    Apache Flink: Remote code execution via SQL injection in code generation

    HighCVSS 8.1Proof of conceptEPSS 0%

    apache · flinkMay 15, 2026

  • CVE-2026-44551
    36Monitor

    Open WebUI: LDAP Empty Password Authentication Bypass

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    openwebui · open webuiMay 15, 2026

  • CVE-2026-45397
    21Monitor

    Open WebUI: Unauthenticated RAG Configuration Disclosure

    MediumCVSS 5.3Proof of conceptEPSS 0%

    openwebui · open webuiMay 15, 2026

  • CVE-2026-45401
    34Monitor

    Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints

    HighCVSS 8.5Proof of conceptEPSS 0%

    openwebui · open webuiMay 15, 2026

  • CVE-2026-45316
    14Monitor

    Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)

    LowCVSS 3.5Proof of conceptEPSS 0%

    openwebui · open webuiMay 15, 2026

  • CVE-2026-46364
    38Monitor

    phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    thorsten · phpmyfaqMay 15, 2026

  • CVE-2026-6379
    34Monitor

    WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter

    HighCVSS 8.6Proof of conceptEPSS 0%

    unknown · wp photo album plusMay 18, 2026

  • CVE-2026-6495
    28Monitor

    Ajax Load More < 7.8.4 - Reflected XSS

    HighCVSS 7.1Proof of conceptEPSS 0%

    unknown · ajax load moreMay 18, 2026

  • CVE-2026-41948
    44Plan

    Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access

    CriticalCVSS 9.3Proof of conceptEPSS 22%

    dify · difyMay 18, 2026

  • CVE-2026-8836
    35Monitor

    lwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow

    HighCVSS 8.9Proof of conceptEPSS 1%

    May 18, 2026

  • CVE-2026-20685
    26Monitor

    An attacker in a privileged network position may be able to leak sensitive information.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    apple · private cloud computeMay 18, 2026

  • CVE-2026-36438
    21Monitor

    An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset f

    MediumCVSS 5.3Proof of conceptEPSS 0%

    May 18, 2026

  • CVE-2026-45829
    45Plan

    A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attack

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    chroma · chromadbMay 18, 2026

  • CVE-2026-8838
    37Monitor

    Remote Code Execution via eval() Injection in amazon-redshift-python-driver

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    aws · amazon redshift connector for pythonMay 18, 2026

  • CVE-2026-29962
    30Monitor

    HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.

    HighCVSS 7.5Proof of conceptEPSS 1%

    hsclabs · mailinspectorMay 18, 2026

  • CVE-2026-29963
    31Monitor

    HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.

    HighCVSS 7.5Proof of conceptEPSS 2%

    hsclabs · mailinspectorMay 18, 2026

  • CVE-2026-30950
    28Monitor

    AutoGPT has Authenticated Session Hijacking via IDOR

    HighCVSS 7.1Proof of conceptEPSS 0%

    significant-gravitas · autogptMay 18, 2026

  • CVE-2026-33234
    20Monitor

    AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server

    MediumCVSS 5.0Proof of conceptEPSS 0%

    significant-gravitas · autogptMay 18, 2026

  • CVE-2026-4885
    39Monitor

    Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    piotnet · piotnet addons for elementor proMay 19, 2026

  • CVE-2026-4883
    40Plan

    Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    piotnet · piotnet formsMay 19, 2026

  • CVE-2026-45434
    45Plan

    Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE

    CriticalCVSS 9.8No exploitEPSS 21%

    apache · ofbizMay 19, 2026

  • CVE-2026-46725
    37Monitor

    Remote Code Execution in extension "Content Element Selector" (ceselector)

    CriticalCVSS 9.2Proof of conceptEPSS 2%

    typo3 · extension "content element selector"May 19, 2026

  • CVE-2026-8726
    32Monitor

    SQL Injection in extension "News system" (news)

    HighCVSS 8.2Proof of conceptEPSS 0%

    typo3 · extension "news system"May 19, 2026

  • CVE-2026-2586
    36Monitor

    An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    eclipse · glassfishMay 19, 2026

  • CVE-2026-2587
    38Monitor

    A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish ga

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    eclipse · glassfishMay 19, 2026

  • CVE-2026-47100
    34Monitor

    Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX

    HighCVSS 8.7Proof of conceptEPSS 0%

    funnelkit · funnel builder for woocommerce checkoutMay 19, 2026

  • CVE-2026-6009
    34Monitor

    Jaspersoft Library Deserialisation Vulnerability

    HighCVSS 8.7Proof of conceptEPSS 0%

    jaspersoft · jasperreports library community editionMay 19, 2026

  • CVE-2026-42096
    34Monitor

    Broken Access Control in Sparx Pro Cloud Server

    HighCVSS 8.7Proof of conceptEPSS 0%

    sparxsystems · pro cloud serverMay 19, 2026

  • CVE-2026-47323
    45Plan

    Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    apache · camelMay 19, 2026

  • CVE-2026-32740
    35Monitor

    libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing

    HighCVSS 8.8Proof of conceptEPSS 0%

    struktur · libheifMay 19, 2026

  • CVE-2026-34234
    41Plan

    CtrlPanel: Unauthenticated RCE using installer script

    CriticalCVSS 10.0Proof of conceptEPSS 3%

    ctrlpanel-gg · panelMay 19, 2026

  • CVE-2026-45585
    28Monitor

    Windows BitLocker Security Feature Bypass Vulnerability

    MediumCVSS 6.8Proof of conceptEPSS 1%

    microsoft · windows 11 24h2May 19, 2026

  • CVE-2026-7467
    35Monitor

    Read More & Accordion <= 3.5.7 - Privilege Escalation via importData

    HighCVSS 8.8Proof of conceptEPSS 1%

    edmonparker · read more & accordionMay 19, 2026

  • CVE-2026-24207
    40Plan

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    nvidia · triton inference serverMay 20, 2026

  • CVE-2026-41091
    63This week

    Microsoft Defender Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 8%

    microsoft · malware protection engineMay 20, 2026

  • CVE-2026-45498
    79This week

    Microsoft Defender Denial of Service Vulnerability

    HighCVSS 7.5KEVWeaponizedEPSS 63%

    microsoft · defender antimalware platformMay 20, 2026

  • CVE-2026-45584
    32Monitor

    Microsoft Defender Remote Code Execution Vulnerability

    HighCVSS 8.1Proof of conceptEPSS 0%

    microsoft · malware protection engineMay 20, 2026

  • CVE-2026-5950
    21Monitor

    Unbounded resend loop in BIND 9 resolver

    MediumCVSS 5.3Proof of conceptEPSS 0%

    isc · bindMay 20, 2026

  • CVE-2026-8467
    39Monitor

    Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

    CriticalCVSS 9.5Proof of conceptEPSS 2%

    phenixdigital · phoenix_storybookMay 20, 2026

  • CVE-2026-39047
    30Monitor

    Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDir

    HighCVSS 7.5Proof of conceptEPSS 0%

    May 20, 2026

  • CVE-2026-20223
    40Plan

    Cisco Secure Workload Unauthorized API Access Vulnerability

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    cisco · secure workloadMay 20, 2026

  • CVE-2026-30691
    24Monitor

    Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a

    MediumCVSS 6.1Proof of conceptEPSS 0%

    May 20, 2026

  • CVE-2026-23734
    43Plan

    XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slash

    CriticalCVSS 9.3No exploitEPSS 18%

    xwiki · xwiki-commonsMay 20, 2026

  • CVE-2026-33137
    37Monitor

    XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    xwiki · xwiki-platformMay 20, 2026

  • CVE-2026-39352
    34Monitor

    Frappe has an Arbitrary File Read via Path Traversal in render_include

    HighCVSS 8.7Proof of conceptEPSS 1%

    frappe · frappeMay 20, 2026

  • CVE-2026-9133
    33Monitor

    Arbitrary file read in rabbitmq-aws plugin

    HighCVSS 8.3Proof of conceptEPSS 1%

    aws · rabbitmq awsMay 20, 2026

  • CVE-2026-9082
    96Now

    Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    CriticalCVSS 9.8KEVWeaponizedEPSS 89%

    drupal · drupalMay 20, 2026

  • CVE-2026-6279
    42Plan

    Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Hand

    CriticalCVSS 9.8Proof of conceptEPSS 9%

    themefusion · avada (fusion) builderMay 21, 2026

  • CVE-2026-48172
    75This week

    LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.

    CriticalCVSS 10.0KEVWeaponizedEPSS 17%

    litespeedtech · litespeed cpanel pluginMay 21, 2026

  • CVE-2026-45250
    31Monitor

    Stack buffer overflow via setcred(2)

    HighCVSS 7.8Proof of conceptEPSS 0%

    freebsd · freebsdMay 21, 2026

  • CVE-2026-5118
    39Monitor

    Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    divi engine · divi form builderMay 21, 2026

  • CVE-2026-34926
    60This week

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table

    MediumCVSS 6.7KEVWeaponizedEPSS 13%

    trendmicro · apex oneMay 21, 2026

  • CVE-2026-43494
    31Monitor

    net/rds: reset op_nents when zerocopy page pin fails

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelMay 21, 2026

  • CVE-2026-43499
    31Monitor

    rtmutex: Use waiter::task instead of current in remove_waiter()

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelMay 21, 2026

  • CVE-2026-43501
    39Monitor

    ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    linux · linux kernelMay 21, 2026

  • CVE-2026-6826
    60This week

    Concrete 9.5.0 and below has file usage disclosure via missing permission check in Usage controller

    MediumCVSS 6.9WeaponizedEPSS 1%

    concretecms · concrete cmsMay 21, 2026

  • CVE-2026-8135
    35Monitor

    Concrete CMS 9.5.0 and below is vulnerable to RCE due to insecure deserialization occurring in the ExpressEntryList block controller.

    HighCVSS 8.9No exploitEPSS 0%

    concretecms · concrete cmsMay 21, 2026

  • CVE-2026-6960
    39Monitor

    BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    repute infosystems · bookingpress appointment booking proMay 21, 2026

  • CVE-2026-8236
    25Monitor

    Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate for endpoint /ccm/system/dialogs/file/usage/{fID}

    MediumCVSS 6.3Proof of conceptEPSS 0%

    concretecms · concrete cmsMay 21, 2026

  • CVE-2026-8237
    25Monitor

    Concrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint

    MediumCVSS 6.3Proof of conceptEPSS 0%

    concretecms · concrete cmsMay 21, 2026

  • CVE-2026-8239
    25Monitor

    Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating'

    MediumCVSS 6.3Proof of conceptEPSS 0%

    concretecms · concrete cmsMay 21, 2026

  • CVE-2026-8337
    25Monitor

    Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveys

    MediumCVSS 6.3Proof of conceptEPSS 0%

    concretecms · concrete cmsMay 21, 2026

  • CVE-2026-47101
    34Monitor

    LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

    HighCVSS 8.7Proof of conceptEPSS 1%

    litellm · litellmMay 21, 2026

  • CVE-2026-47102
    34Monitor

    LiteLLM < 1.83.10 Privilege Escalation via User Update

    HighCVSS 8.7Proof of conceptEPSS 0%

    litellm · litellmMay 21, 2026

  • CVE-2026-34908
    96Now

    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauth

    CriticalCVSS 10.0KEVWeaponizedEPSS 88%

    ui · unifi os serverMay 21, 2026

  • CVE-2026-34909
    90Now

    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the u

    CriticalCVSS 10.0KEVWeaponizedEPSS 68%

    ui · unifi os serverMay 21, 2026

  • CVE-2026-34910
    97Now

    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a

    CriticalCVSS 10.0KEVWeaponizedEPSS 90%

    ui · unifi os serverMay 21, 2026

  • CVE-2026-46595
    40Plan

    Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    golang · cryptoMay 22, 2026

  • CVE-2026-9018
    35Monitor

    Easy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter

    HighCVSS 8.8Proof of conceptEPSS 0%

    themewant · easy elements for elementor – addons & website templatesMay 22, 2026

  • CVE-2026-7798
    21Monitor

    FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter

    MediumCVSS 5.4Proof of conceptEPSS 0%

    techjewel · fluentcrm – email newsletter, automation, email marketing, email campaigns, optins, leads, and crm solutionMay 22, 2026

  • CVE-2026-8679
    30Monitor

    AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter

    HighCVSS 7.5Proof of conceptEPSS 1%

    cssigniterteam · audioigniter music playerMay 22, 2026

  • CVE-2026-9277
    36Monitor

    shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

    CriticalCVSS 9.2Proof of conceptEPSS 0%

    May 22, 2026

  • CVE-2026-8347
    9Monitor

    Concrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in Express association Reorder dialog

    LowCVSS 2.3Proof of conceptEPSS 0%

    concretecms · concrete cmsMay 22, 2026

  • CVE-2026-9256
    39Monitor

    NGINX ngx_http_rewrite_module vulnerability

    CriticalCVSS 9.2Proof of conceptEPSS 10%

    f5 · nginx open sourceMay 22, 2026

  • CVE-2026-39821
    39Monitor

    Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

    CriticalCVSS 9.6No exploitEPSS 1%

    golang · netMay 22, 2026

  • CVE-2026-33712
    40Plan

    TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    baptistearno · typebot.ioMay 22, 2026

  • CVE-2026-34207
    30Monitor

    TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation

    HighCVSS 7.6Proof of conceptEPSS 0%

    baptistearno · typebot.ioMay 22, 2026

  • CVE-2026-36226
    24Monitor

    Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via

    MediumCVSS 6.1Proof of conceptEPSS 0%

    May 22, 2026

  • CVE-2026-36227
    26Monitor

    Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary cod

    MediumCVSS 6.5Proof of conceptEPSS 0%

    May 22, 2026

  • CVE-2026-36228
    29Monitor

    Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code vi

    HighCVSS 7.3Proof of conceptEPSS 0%

    May 22, 2026

  • CVE-2026-5817
    35Monitor

    Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

    HighCVSS 8.8Proof of conceptEPSS 0%

    docker · docker desktopMay 22, 2026

  • CVE-2026-5843
    35Monitor

    Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

    HighCVSS 8.8Proof of conceptEPSS 0%

    docker · docker desktopMay 22, 2026

  • CVE-2026-40864
    17Monitor

    JupyterHub: Cross-origin form POSTs bypass XSRF

    MediumCVSS 4.3Proof of conceptEPSS 0%

    jupyter · jupyterhubMay 22, 2026

  • CVE-2026-45659
    89Now

    Microsoft SharePoint Remote Code Execution Vulnerability

    HighCVSS 8.8KEVWeaponizedEPSS 80%

    microsoft · sharepoint serverMay 22, 2026

  • CVE-2026-43503
    40Plan

    net: skbuff: propagate shared-frag marker through frag-transfer helpers

    HighCVSS 8.8WeaponizedEPSS 1%

    linux · linux kernelMay 23, 2026

  • CVE-2026-46300
    66This week

    net: skbuff: preserve shared-frag marker during coalescing

    HighCVSS 7.8KEVWeaponizedEPSS 16%

    linux · linux kernelMay 23, 2026

  • CVE-2026-9370
    11Monitor

    ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt

    LowCVSS 2.9No exploitEPSS 0%

    ulisesbocchio · jasypt-spring-bootMay 24, 2026

  • CVE-2026-4372
    31Monitor

    Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

    HighCVSS 7.8Proof of conceptEPSS 0%

    huggingface · transformersMay 24, 2026

  • CVE-2026-9440
    13Monitor

    Edimax BR-6478AC POST Request formAccept command injection

    LowCVSS 2.1No exploitEPSS 16%

    edimax · br-6478acMay 25, 2026

  • CVE-2026-9490
    27Monitor

    Acer Care Center creates a Named Pipe with a weak Security Descriptor

    MediumCVSS 6.8Proof of conceptEPSS 0%

    acer · care centerMay 25, 2026

  • CVE-2026-9441
    13Monitor

    Edimax BR-6478AC POST Request formiNICbasic command injection

    LowCVSS 2.1No exploitEPSS 15%

    edimax · br-6478acMay 25, 2026

  • CVE-2026-48842
    33Monitor

    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_re

    HighCVSS 8.1Proof of conceptEPSS 1%

    roundcube · webmailMay 25, 2026

  • CVE-2026-48849
    17Monitor

    In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stor

    MediumCVSS 4.4Proof of conceptEPSS 0%

    roundcube · webmailMay 25, 2026

  • CVE-2026-9514
    11Monitor

    Totolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injection

    LowCVSS 2.1No exploitEPSS 10%

    totolink · ca750-poeMay 25, 2026

  • CVE-2026-9515
    11Monitor

    Totolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injection

    LowCVSS 2.1No exploitEPSS 10%

    totolink · ca750-poeMay 25, 2026

  • CVE-2026-9531
    11Monitor

    Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection

    LowCVSS 2.1No exploitEPSS 10%

    totolink · ca750-poeMay 26, 2026

  • CVE-2026-9532
    11Monitor

    Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection

    LowCVSS 2.1No exploitEPSS 10%

    totolink · ca750-poeMay 26, 2026

  • CVE-2026-9533
    11Monitor

    Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection

    LowCVSS 2.1No exploitEPSS 10%

    totolink · ca750-poeMay 26, 2026

  • CVE-2026-9534
    11Monitor

    Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection

    LowCVSS 2.1No exploitEPSS 10%

    totolink · ca750-poeMay 26, 2026