Skip to content

The catalog

Browse Reproductions

220 verified reproductions

RSS Feed

Popular records

Top viewed reproduction records

Frequently opened evidence pages with direct links to runnable proof and permanent REPRO IDs.

REPRO-2026-00294 WordPress 7.0.1 pre-auth fresh-administrator chain to RCE CVE-2026-63030 / critical / WordPress Core REPRO-2026-00297 JFrog Artifactory privilege escalation allowing low-privileged users to obtain elevated permissions high / Artifactory REPRO-2026-00306 fastjson2 AutoType type-resolution flaw may lead to remote code execution critical / alibaba/fastjson2 REPRO-2026-00319 MariaDB Galera SST remote_auth shell command injection (wsrep_shell_char blacklist bypass) — candidate for v12sec 2026-07-31 0day critical / MariaDB/server REPRO-2026-00308 NGINX ASLR-enabled network RCE CVE-2026-42533 / critical / nginx/nginx REPRO-2026-00307 vBulletin runtime template runMaths pre-auth RCE CVE-2026-61511 / critical / vBulletin

220 reproductions

REPRO-2026-00236 published

Orkes Conductor unauthenticated RCE via inline script evaluators

CVE-2026-58138 critical Security Variant found
conductor-oss/conductor (Orkes Conductor OSS)
24m 53s Jul 6, 2026
REPRO-2026-00235 published

PACSgear PACS Scan unauthenticated remote code execution

CVE-2026-58126 critical Security Variant found
Hyland/PACSgear PACS Scan
64m 7s Jul 6, 2026
REPRO-2026-00234 published

Blocksy Companion Pro unauthenticated remote code execution

CVE-2026-57624 critical Security Variant found
Creative Themes/Blocksy Companion Pro
37m 0s Jul 6, 2026
REPRO-2026-00233 published

Grav CMS unsafe deserialization and command injection RCE

CVE-2026-56700 critical Security Variant found
getgrav/grav (Composer)
53m 20s Jul 6, 2026
REPRO-2026-00232 published

Page Builder CK unauthenticated arbitrary file upload to RCE

CVE-2026-56290 critical Security Variant found
joomlack/page_builder_ck
23m 44s Jul 6, 2026
REPRO-2026-00231 published

HTTP/2 request smuggling in Vinyl Cache and Varnish Cache (VSV00019)

CVE-2026-50052 low Security Variant found github
varnish/varnish
28m 5s Jul 6, 2026
REPRO-2026-00230 published

Widget Options WordPress plugin contributor remote code execution

CVE-2026-54823 critical Security Variant found
MarketingFire/Widget Options
28m 45s Jul 6, 2026
REPRO-2026-00229 published

CivetWeb PUT + SSI #exec RCE

CVE-VINEXT-CIVETWEB-PUT-SSI-RCE high Security Variant found github
civetweb/civetweb
34m 27s Jul 4, 2026
REPRO-2026-00228 published

nginx charset module segfaults when charset_map uses utf-8 as source charset, causing a NULL pointer dereference and DoS.

high Security generic
nginx
9m 18s Jul 4, 2026
REPRO-2026-00227 published

Grafana unified storage IAM service account listing lacked RBAC filtering, allowing low-privileged users to enumerate service accounts.

high Security Go
grafana/grafana
31m 40s Jul 4, 2026
REPRO-2026-00226 published

Grafana IAM LIST authorization could be bypassed for folder-scoped CRDs when a user had wildcard resource permissions, returning `All: true` without folder-level checks.

high Security Go
grafana/grafana
22m 1s Jul 4, 2026
REPRO-2026-00225 published

Node.js WebCrypto EdDSA verification accepted small-order points, allowing signature verification bypass for Ed25519/Ed448 before the 29890721 fix.

high Security other
nodejs
7m 45s Jul 4, 2026
REPRO-2026-00224 published

Node.js task runner improperly escapes single quotes on Unix, enabling shell syntax breakouts and potential command injection via `node --run` arguments.

high Security nodejs
node
47m 12s Jul 4, 2026
REPRO-2026-00223 published

phpBB authentication bypass/account hijacking via OAuth login-link flow with arbitrary auth_provider=apache

CVE-2026-48611 critical Security Variant found github
phpbb/phpbb
22m 9s Jul 4, 2026
REPRO-2026-00222 published

SimpleHelp OIDC authentication accepts unsigned/forged ID tokens, enabling remote authentication bypass and possible MFA bypass in versions 5.5.15 and earlier and 6.0 prereleases prior to the fixed release.

CVE-2026-48558 critical Security Variant found other (commercial, Java-based server application)
SimpleHelp
94m 25s Jul 4, 2026
REPRO-2026-00221 published

Linux kernel FUSE readdir cache out-of-bounds write

CVE-2026-31694 high Security Variant found
Linux kernel (FUSE subsystem)
63m 5s Jul 3, 2026
REPRO-2026-00220 published

JuiceFS through 1.3.1 exposes debug/metrics endpoints via shared http.DefaultServeMux, enabling authentication bypass and leakage of sensitive metadata connection strings, with potential DoS via profiling handlers.

CVE-2026-59092 high Security Variant found go
JuiceFS (juicedata/juicefs)
14m 46s Jul 3, 2026
REPRO-2026-00219 published

AutoBangumi before 3.2.8 seeds a default admin account on empty databases, allowing unauthenticated users to log in with publicly known default credentials and gain full control.

CVE-2026-58466 critical Security Variant found standalone application (Python/FastAPI)
EstrellaXD/Auto_Bangumi
14m 56s Jul 3, 2026
REPRO-2026-00218 published

fast-mcp-telegram <=0.19.0 allows bearer token path traversal to authenticate as the default telegram.session, bypassing reserved session name protections and enabling unauthorized access to Telegram MCP tools.

CVE-2026-52830 critical Security Variant found pip
fast-mcp-telegram
17m 51s Jul 3, 2026
REPRO-2026-00217 published

9router hardcoded default fallback JWT secret allows authentication bypass

CVE-2026-49352 critical Security Variant found github
decolua/9router
13m 50s Jul 3, 2026