The catalog
Browse CVE Reproductions
249 verified reproductions
Popular records
Top viewed reproduction records
Frequently opened evidence pages with direct links to runnable proof and permanent REPRO IDs.
REPRO-2026-00356 WordPress Core unauthenticated path traversal in get_page_template() page-template resolution leading to conditional RCE REPRO-2026-00354 GitLab CE/EE unauthenticated path traversal in Repository Commits API leads to arbitrary file read REPRO-2026-00357 Next.js next/og ImageResponse RCE via Satori improper SVG escaping (critical) REPRO-2026-00341 JFrog Artifactory critical unauthenticated authentication bypass leading to administrative takeover REPRO-2026-00337 Keycloak reset-credentials flow: unauthenticated account takeover (CWE-640) REPRO-2026-00355 ArangoDB full-chain: unauthenticated %5f URL auth bypass (GHSA-rrgq-978q-36mq) + client-controlled isSystem task escalation (GHSA-rvhw-4hpw-9vrx) -> root-context file write -> host RCE
249 reproductions
Clear filters Active CVE
REPRO-2026-00333 published
Crypt::OpenSSL::PKCS12 before 1.98 can crash with a NULL pointer dereference when `info_as_hash()` parses a crafted PKCS#12 containing a zero-length BMPSTRING attribute.
CVE-2026-17510 medium Security
Variant found
Known vulnerability CPAN
dsully/perl-crypt-openssl-pkcs12
17m 47s Aug 23, 2026
REPRO-2026-00332 published
Fledge backup upload shell command injection
CVE-2026-71284 high Security
Variant found
Known vulnerability github
fledge-iot/fledge
91m 3s Aug 23, 2026
REPRO-2026-00331 published
OpenCTI CVE-2026-39980 safeEjs destructuring fix bypass RCE
CVE-2026-39980 critical Security
Variant found
Known vulnerability github
opencti-platform/opencti
106m 24s Aug 23, 2026
REPRO-2026-00329 published
JetBrains TeamCity On-Premises unauthenticated RCE via agent polling protocol
CVE-2026-63077 critical Security Known vulnerability
JetBrains TeamCity
100m 55s Aug 23, 2026
REPRO-2026-00328 published
PasswordPusher allows unauthenticated deletion of anonymous pushes due to a nil==nil ownership check that bypasses viewer-deletion restrictions.
CVE-2026-62382 medium Security Known vulnerability Ruby on Rails self-hosted application, also shipped as Docker image pglombardo/pwpush
pglombardo/PasswordPusher
21m 33s Aug 23, 2026
REPRO-2026-00327 published
Zimbra Collaboration unauthenticated RCE via Swatchdog/SNMP log-injection command injection (swatchrc dosnmp Perl backtick)
CVE-2026-73570 high Security Known vulnerability
Zimbra Collaboration (ZCS)
94m 1s Aug 23, 2026
REPRO-2026-00326 published
Hermes Agent Electron preview webview sandbox escape via CVE-2026-70608
CVE-2026-70608 high Security Dependency reachability github
hermes-agent
271m 8s Aug 23, 2026
REPRO-2026-00325 published
Wazuh cluster DAPI deserialization of untrusted data — RCE via sort_casting builtin resolution (getattr(builtins, 'exec')) in result merging
CVE-2026-44901 high Security Known vulnerability github
wazuh/wazuh
83m 25s Aug 23, 2026
REPRO-2026-00324 published
Unauthenticated path traversal in xmysql `/download` allows arbitrary file read via unsanitized `req.query.name`.
CVE-2026-72572 high Security Known vulnerability npm / JavaScript (Node.js, Express)
xmysql
12m 11s Aug 23, 2026
REPRO-2026-00323 published
Google::Auth for Perl command injection: external_account credentials JSON executable run via ungated system() → RCE
CVE-2026-66902 critical Security Known vulnerability
Google-Auth
16m 52s Aug 23, 2026
REPRO-2026-00322 published
Jenkins Remoting JEP-200 deserialization filter bypass (SECURITY-3911): unfiltered ClassNotFoundException fallback in MultiClassLoaderSerializer.resolveClass and ObjectInputStreamEx.resolveClass lets agents deserialize blocked core-classpath classes on the controller
CVE-2026-70426 critical Security Known vulnerability
jenkinsci/remoting (hudson.remoting)
162m 43s Aug 23, 2026
REPRO-2026-00321 published
huggingface/transformers <5.10.0: path traversal via chat_template dict keys in save_pretrained() → arbitrary file write → RCE (cron.d drop)
CVE-2026-9856 high Security Known vulnerability
huggingface/transformers
0m 19s Aug 23, 2026
REPRO-2026-00320 published
CodeIgniter4 is_image/mime_in upload validation bypass — unrestricted file upload leading to RCE
CVE-2026-63223 critical Security Known vulnerability github
codeigniter4/framework
24m 2s Aug 23, 2026
REPRO-2026-00318 published
mcp-toolbox authorization bypass: unauthenticated tool invocation via direct HTTP API
CVE-2026-14537 high Security Known vulnerability github
googleapis/genai-toolbox
37m 46s Aug 1, 2026
REPRO-2026-00317 published
Rails Active Storage variant processing arbitrary file read and potential RCE
CVE-2026-66066 critical Security Known vulnerability github
rails/rails
148m 42s Aug 1, 2026
REPRO-2026-00316 published
marimo Pre-Auth RCE via Terminal WebSocket Authentication Bypass (/terminal/ws missing validate_auth)
CVE-2026-39987 critical Security Known vulnerability github
marimo
24m 19s Jul 30, 2026
REPRO-2026-00315 published
Unauthenticated RCE in ruflo MCP bridge default docker-compose deployment
CVE-2026-59726 critical Security Known vulnerability npm
ruflo
34m 45s Jul 30, 2026
REPRO-2026-00314 published
OpenCTI authentication bypass via user impersonation
CVE-2026-27960 critical Security Known vulnerability docker
opencti
44m 34s Jul 30, 2026
REPRO-2026-00312 published
Gitea diffpatch Git hook installation leads to remote code execution
CVE-2026-60004 critical Security Known vulnerability github
go-gitea/gitea
30m 6s Jul 29, 2026
REPRO-2026-00311 published
xrdp Xvnc backend authentication issue on RHEL 9
CVE-2026-55626 high Security Known vulnerability github
neutrinolabs/xrdp
64m 30s Jul 29, 2026