Skip to content

The catalog

Browse CVE Reproductions

249 verified reproductions

RSS Feed

Popular records

Top viewed reproduction records

Frequently opened evidence pages with direct links to runnable proof and permanent REPRO IDs.

REPRO-2026-00356 WordPress Core unauthenticated path traversal in get_page_template() page-template resolution leading to conditional RCE CVE-2026-87902 / critical / WordPress/wordpress-develop REPRO-2026-00354 GitLab CE/EE unauthenticated path traversal in Repository Commits API leads to arbitrary file read CVE-2026-85706 / critical / gitlab REPRO-2026-00357 Next.js next/og ImageResponse RCE via Satori improper SVG escaping (critical) CVE-2026-94545 / critical / next REPRO-2026-00341 JFrog Artifactory critical unauthenticated authentication bypass leading to administrative takeover CVE-2026-82329 / critical / JFrog Artifactory REPRO-2026-00337 Keycloak reset-credentials flow: unauthenticated account takeover (CWE-640) CVE-2026-18963 / critical / org.keycloak:keycloak-services (Maven) REPRO-2026-00355 ArangoDB full-chain: unauthenticated %5f URL auth bypass (GHSA-rrgq-978q-36mq) + client-controlled isSystem task escalation (GHSA-rvhw-4hpw-9vrx) -> root-context file write -> host RCE critical / ArangoDB server

249 reproductions

Clear filters
Active CVE
REPRO-2026-00310 published

Flowise arbitrary file access via unvalidated chatflowId/chatId

CVE-2025-71334 critical Security Known vulnerability npm
FlowiseAI/Flowise
66m 57s Jul 28, 2026
REPRO-2026-00309 published

PipeWire sandbox escape via malicious library loading in PulseAudio compatibility layer

CVE-2026-5674 high Security Known vulnerability
pipewire (pipewire-pulse daemon)
88m 8s Jul 28, 2026
REPRO-2026-00308 published

NGINX ASLR-enabled network RCE

CVE-2026-42533 critical Security Known vulnerability github
nginx/nginx
71m 44s Jul 27, 2026
REPRO-2026-00307 published

vBulletin runtime template runMaths pre-auth RCE

CVE-2026-61511 critical Security Discovery hunt
vBulletin
139m 11s Jul 27, 2026
REPRO-2026-00305 published

SiYuan missing authorization in /mcp enables unauthenticated administrator takeover via Publish proxy

CVE-2026-66012 critical Security Known vulnerability github
siyuan
171m 57s Jul 27, 2026
REPRO-2026-00304 published

NoteGen chat preview XSS via unsanitized HTML rendering before 0.32.0

CVE-2026-17496 high Security Known vulnerability github
note-gen
78m 29s Jul 27, 2026
REPRO-2026-00303 published

AWS API MCP Server security policy bypass via startup initialization failure

CVE-2026-16584 high Security Known vulnerability pip
awslabs.aws-api-mcp-server
29m 52s Jul 27, 2026
REPRO-2026-00302 published

datamodel-code-generator code injection via customBasePath before 0.70.0

CVE-2026-63720 high Security Known vulnerability pip
datamodel-code-generator
13m 44s Jul 27, 2026
REPRO-2026-00300 published

OpenRemote console registration authentication bypass via known asset identifier

CVE-2026-66013 critical Security Known vulnerability github
openremote
35m 36s Jul 27, 2026
REPRO-2026-00294 published

WordPress 7.0.1 pre-auth fresh-administrator chain to RCE

CVE-2026-63030 critical Security Variant found Known vulnerability
WordPress Core
65m 17s Jul 19, 2026
REPRO-2026-00293 published

Metabase arbitrary code execution via unsafe H2 connection property validation bypass

CVE-2026-59826 critical Security Variant found Known vulnerability github
metabase/metabase
92m 57s Jul 17, 2026
REPRO-2026-00292 published

websocket-driver: message corruption via abuse of draft-WebSocket length headers

CVE-2026-54466 critical Security Variant found Known vulnerability npm
faye/websocket-driver-node
7m 28s Jul 16, 2026
REPRO-2026-00291 published

systeminformation networkInterfaces() Linux source-directive command injection

CVE-2026-50289 high Security Variant found Known vulnerability github
sebhildebrandt/systeminformation
14m 44s Jul 16, 2026
REPRO-2026-00290 published

ToolHive SSRF in remote MCP server authentication discovery

CVE-2026-58196 medium Security Variant found Known vulnerability github
github.com/stacklok/toolhive
43m 47s Jul 16, 2026
REPRO-2026-00289 published

Spinnaker Kustomize bake unsafe YAML tag processing leading to RCE

CVE-2026-55175 high Security Variant found Known vulnerability github
spinnaker/spinnaker
15m 51s Jul 15, 2026
REPRO-2026-00288 published

Horde VFS < 3.0.1 OS command injection via Horde_Vfs_Smb driver

CVE-2026-60102 high Security Variant found github
horde/vfs
12m 50s Jul 14, 2026
REPRO-2026-00287 published

Apache APISIX jwt-auth authentication bypass via algorithm confusion

CVE-2026-39999 critical Security Variant found github
apache/apisix
14m 33s Jul 14, 2026
REPRO-2026-00286 published

Log4j MapMessage emits invalid JSON for non-finite values

CVE-2026-49844 medium Security Variant found maven
org.apache.logging.log4j:log4j-api
11m 14s Jul 13, 2026
REPRO-2026-00285 published

Samba’s printing subsystem allows OS command injection via unescaped job description (%J), enabling remote code execution through crafted print jobs.

CVE-2026-4480 critical Security Variant found generic
samba-team/samba
28m 55s Jul 13, 2026
REPRO-2026-00283 published

Nuclio cron trigger shell command injection leading to RCE

CVE-2026-52831 critical Security Variant found go
github.com/nuclio/nuclio
89m 0s Jul 11, 2026