{"vulnerability": "CVE-2026-2280", "sightings": [{"uuid": "fbfff732-68bf-4c94-9089-23fc0d7d142c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22806", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlmc6cf422h", "content": "", "creation_timestamp": "2026-01-29T20:18:46.350812Z"}, {"uuid": "fb0a4f8a-a398-4dc0-bf37-d8e01ab0c80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlsahnt3c2h", "content": "", "creation_timestamp": "2026-01-29T22:05:11.187390Z"}, {"uuid": "fd748b1a-77dc-4f90-89b9-d55038126a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22801", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mcb7d2nsn62a", "content": "", "creation_timestamp": "2026-01-12T23:34:47.920972Z"}, {"uuid": "b1df5efe-696d-4500-baec-7047419abddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbalje22o22", "content": "", "creation_timestamp": "2026-01-12T23:57:27.500916Z"}, {"uuid": "2ff578b2-2b97-4191-bfc0-7a2f083d2309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcbgaj3bty2o", "content": "", "creation_timestamp": "2026-01-13T01:38:38.307376Z"}, {"uuid": "2efc3d49-3f02-43ed-b650-4c437c69b0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcbgdupbhb2x", "content": "", "creation_timestamp": "2026-01-13T01:40:31.148243Z"}, {"uuid": "4b12dce0-41c9-437f-ac6a-196a66febc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcbhe5l6oy2u", "content": "", "creation_timestamp": "2026-01-13T01:58:34.346075Z"}, {"uuid": "06215823-ffe0-4d64-a2bf-69ef6c4548f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22801", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/57", "content": "", "creation_timestamp": "2026-01-12T22:19:57.000000Z"}, {"uuid": "1408b844-bb65-4324-8955-54b361c0e52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcbhsjzy5g2c", "content": "", "creation_timestamp": "2026-01-13T02:06:37.223511Z"}, {"uuid": "785cf44c-109b-4c5c-8d6e-bf65f4ce4d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22801", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mcc227w2ne2a", "content": "", "creation_timestamp": "2026-01-13T07:33:03.355923Z"}, {"uuid": "e0b24e1f-a3ea-41ad-925c-18c59777a024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22801", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mcgbqt32zq2n", "content": "", "creation_timestamp": "2026-01-15T00:01:35.929160Z"}, {"uuid": "881f6027-38ea-4382-ba7b-befd43beb6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22801", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcmlaugrb22f", "content": "", "creation_timestamp": "2026-01-17T12:07:44.526898Z"}, {"uuid": "126a944c-6d90-463b-a463-ecf94fe64b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22807", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxpbqntmt22", "content": "", "creation_timestamp": "2026-01-21T22:18:58.242452Z"}, {"uuid": "2fb5f287-3455-4fab-8cad-981856f8c45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcy5qja7p22t", "content": "", "creation_timestamp": "2026-01-22T02:37:45.824829Z"}, {"uuid": "c46de8e3-7dae-44b5-85f1-02e1b5722d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22809", "type": "seen", "source": "https://gist.github.com/alon710/9d9c15020305bb7e2d3e52c842759649", "content": "", "creation_timestamp": "2026-01-24T21:25:12.000000Z"}, {"uuid": "37cca8da-f433-4091-9cfd-1cd15feb7a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22808", "type": "seen", "source": "https://gist.github.com/alon710/6cb56ce49fdd250735cd1e3f48481606", "content": "", "creation_timestamp": "2026-01-24T21:23:38.000000Z"}, {"uuid": "ca3502b0-bd05-4712-9308-4a5140191afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-22803", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/2b58b75c-ed2f-43e6-9955-22f649ee1814", "content": "", "creation_timestamp": "2026-02-18T14:20:55.000000Z"}, {"uuid": "50d2e0b2-197c-4615-a950-456a4385050f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22808", "type": "seen", "source": "https://gist.github.com/alon710/1a22eed3048b1282bb535d59be57eb71", "content": "", "creation_timestamp": "2026-01-24T22:26:36.000000Z"}, {"uuid": "50570810-1567-45d0-bc73-bedcd19d9d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22808", "type": "seen", "source": "https://gist.github.com/alon710/f30dfca4833be946bfbfe3ad5d0ceea4", "content": "", "creation_timestamp": "2026-01-24T22:26:33.000000Z"}, {"uuid": "6a558b60-badf-4c64-978e-1c64638a35d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22809", "type": "seen", "source": "https://gist.github.com/alon710/9abd26d07048f88e13b0eccb19e938c5", "content": "", "creation_timestamp": "2026-01-24T22:40:42.000000Z"}, {"uuid": "4a95a901-edc0-48bc-ab71-f627896e6d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22805", "type": "seen", "source": "Telegram/lg_uE38htKCDsrEIH_zbRJLgqsKSDV6aHHtfYRxKZkwP2V8", "content": "", "creation_timestamp": "2026-04-10T15:17:16.000000Z"}, {"uuid": "5f5091ff-5562-4b17-8014-af7cf610666e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "Telegram/4zuUlGU6EvpMTWPbip1_D3Ts-W_MioI6unE3WF1UcmysLKI", "content": "", "creation_timestamp": "2026-01-13T00:02:07.000000Z"}, {"uuid": "996dc1db-22dc-4d07-ad4d-1a21364a9d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "Telegram/zAlSgwPEpZRf5_7SJDj8VJ26DOIvbWjJ7eQuNL-gBoyhasQ", "content": "", "creation_timestamp": "2026-01-13T07:00:14.000000Z"}, {"uuid": "6e0bdcb5-8c57-4d07-9ca0-ab66ffd38603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "Telegram/9SS8wnntZTDHhPirlI1D0mcsGjCiHrfpgOECZvIj5SmuXrk", "content": "", "creation_timestamp": "2026-01-13T09:00:27.000000Z"}, {"uuid": "cffc268e-7f48-4fcc-9f02-0272c24dc1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.279568Z"}, {"uuid": "5fac373a-e951-4119-a2ed-da96443a1c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.601097Z"}, {"uuid": "7fe1cf6c-376c-490f-82e2-e51ede2f7f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.676380Z"}, {"uuid": "7dba37fd-27b0-4c00-afa9-204a1e2d1f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.000429Z"}, {"uuid": "3d2b1a93-28fe-4105-99c5-cfacf145ee44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:29.377091Z"}, {"uuid": "238d787a-0ec5-4ca8-98ca-16799233ec85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.114948Z"}, {"uuid": "cbb201ac-a7f5-4370-8912-821b833cf31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22807", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:13.935259Z"}, {"uuid": "a682989f-f0e5-42a8-ac69-42e55af9c8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22807", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-03T00:00:48.391116Z"}]}