Trending CVEs update 2026-10-11 15:12 🤖

2026-10-27 16:51:03 +00:00 · 2026-10-11 15:12:23 +00:00
1 parent bccc168346
commit 2bee8504b1
@@ -2,7 +2,7 @@

 <a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173816-84370-1230" alt="PoC Index" width="100%"></a>

-[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2014%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610111407)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C370-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610111407)](https://github.com/0xMarcio/pocindex/stargazers)
+[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2015%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610111507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C370-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610111507)](https://github.com/0xMarcio/pocindex/stargazers)

 <a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>

@@ -14,13 +14,13 @@

 | Stars | Released | PoC | Description |
 | --- | --- | --- | --- |
-| 0⭐ | 2h ago | [CVE-2026-27626](https://github.com/Shisones/CVE-2026-27626) | CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root… |
-| 0⭐ | 5h ago | [Exploit-CVE-2026-40224](https://github.com/0xparad0x/Exploit-CVE-2026-40224) | CVE-2026-40224: systemd-machined local privilege escalation |
-| 0⭐ | 7h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819](https://github.com/Wayang1337/CVE-2025-57819) | FreePBX unauthenticated SQLi (endpoint module) |
-| 0⭐ | 7h ago | [CVE-2026-104335](https://github.com/Farih123/CVE-2026-104335) | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code… |
-| 0⭐ | 9h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-24813](https://github.com/toyplan/cve-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… |
-| 0⭐ | 12h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… |
-| 0⭐ | 14h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent |
+| 0⭐ | 3h ago | [CVE-2026-27626](https://github.com/Shisones/CVE-2026-27626) | CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root… |
+| 0⭐ | 6h ago | [Exploit-CVE-2026-40224](https://github.com/0xparad0x/Exploit-CVE-2026-40224) | CVE-2026-40224: systemd-machined local privilege escalation |
+| 0⭐ | 8h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819](https://github.com/Wayang1337/CVE-2025-57819) | FreePBX unauthenticated SQLi (endpoint module) |
+| 0⭐ | 8h ago | [CVE-2026-104335](https://github.com/Farih123/CVE-2026-104335) | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code… |
+| 0⭐ | 10h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-24813](https://github.com/toyplan/cve-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… |
+| 0⭐ | 13h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… |
+| 0⭐ | 15h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent |
 | 0⭐ | 1d ago | [CVE-2026-102428](https://github.com/murrez/CVE-2026-102428) | CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi - order_field/order_direction… |
 | 0⭐ | 1d ago | [CVE-2026-106445](https://github.com/murrez/CVE-2026-106445) | CVE-2026-106445 - Handlebars 4.0.0-4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f).… |
 | 0⭐ | 1d ago | [CVE-2026-107806](https://github.com/murrez/CVE-2026-107806) | CVE-2026-107806 - nginx-ui 2.3.8-2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET… |
@@ -37,18 +37,18 @@
 | 88⭐ | 29d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… |
 | 49⭐ | 12d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE |
 | 105⭐ | 46d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
-| 7⭐ | 1h ago | [cve-2026-43499-honor](https://github.com/knowlily/cve-2026-43499-honor) | CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro,… |
 | 86⭐ | 37d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) |
+| 7⭐ | 2h ago | [cve-2026-43499-honor](https://github.com/knowlily/cve-2026-43499-honor) | CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro,… |
 | 108⭐ | 68d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… |
 | 40⭐ | 17d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability |
+| 109⭐ | 84d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
 | 39⭐ | 18d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
-| 108⭐ | 84d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
 | 31⭐ | 13d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. |
 | 35⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
 | 26⭐ | 13d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read |
 | 43⭐ | 29d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
-| 86⭐ | 90d ago | [Android-CVE-2026-43499](https://github.com/CakesTwix/Android-CVE-2026-43499) | Android version CVE-2026-43499 tester |
-| 13⭐ | 5d ago | [watchTowr-vs-Atlassian-CVE-2026-21589](https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… |
+| 87⭐ | 90d ago | [Android-CVE-2026-43499](https://github.com/CakesTwix/Android-CVE-2026-43499) | Android version CVE-2026-43499 tester |
+| 44⭐ | 34d ago | [CVE-2026-28576-poc](https://github.com/mobilehackinglab/CVE-2026-28576-poc) | SQL injection vulnerability in Android 17 (AOSP) |

 ## Trending in 2025

@@ -59,7 +59,7 @@
 | 10⭐ | 45d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
 | 7⭐ | 52d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
 | 8⭐ | 70d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… |
-| 7⭐ | 65d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
+| 7⭐ | 66d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
 | 5⭐ | 81d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
 | 3⭐ | 44d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
 | 3⭐ | 54d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 |
@@ -3824,7 +3824,7 @@
 "CVE-2022-26134 github:rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb"},
 "CVE-2022-26134 github:reph0r/poc-exp?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reph0r/poc-exp"},
 "CVE-2022-26134 github:reubensammut/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reubensammut/cve-2022-26134"},
-"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-11T03:07:59Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"425cffd7a9b2aad60bf142a09f089c22937d7f2f","imported":true,"pending":true,"pushed_at":"2026-10-09T23:02:02Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"},
+"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-11T15:08:37Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"425cffd7a9b2aad60bf142a09f089c22937d7f2f","imported":true,"pending":true,"pushed_at":"2026-10-09T23:02:02Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"},
 "CVE-2022-26134 github:secjia/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/secjia/CVE-2022-26134"},
 "CVE-2022-26134 github:shamo0/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shamo0/CVE-2022-26134"},
 "CVE-2022-26134 github:shiftsansan/cve-2022-26134-console?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shiftsansan/CVE-2022-26134-Console"},
@@ -3578,7 +3578,7 @@
 "CVE-2026-21589 github:0xblackash/cve-2026-21589?#":{"basis":"commit","blobs":["ea6d9269d791f32f99dced1a1ac1d3c83ba8a54a"],"checked":"2026-10-07T16:09:46Z","commit":"2026-10-07T16:02:15Z","commit_verified":true,"copy":"CVE-2026-21589 github:marcusprogram/cve-2026-21589?#","created":"2026-10-07T15:41:20Z","cve":"CVE-2026-21589","head":"66dfe8ed84e09f77866e34d9ddc11375db8874f9","history_paths":["CVE-2026-21589.py"],"history_version":3,"paths":["CVE-2026-21589.py"],"pushed_at":"2026-10-07T16:02:15Z","released":"2026-10-06T15:51:43Z","repo":1409019111,"rev":"fe3cdf4367adb0a2c3026a3d954c204e7ec7c4ec39166ee2ceaeda7c0438ac43","seen":"2026-10-07T16:09:53Z","sha":"66dfe8ed84e09f77866e34d9ddc11375db8874f9","url":"https://github.com/0xBlackash/CVE-2026-21589"},
 "CVE-2026-21589 github:aduli198/cve-2026-21589?#":{"basis":"commit","blobs":["c36930227d632cac27206146421a062cd0e5ccce"],"checked":"2026-10-07T12:09:09Z","commit":"2026-10-07T09:10:12Z","commit_verified":true,"created":"2026-10-07T09:03:00Z","cve":"CVE-2026-21589","head":"3c08a1ae4fe83563b3f9bafb4855720a2f508ce5","history_paths":["cve-2026-21589-admin-takeover.py"],"history_version":3,"paths":["cve-2026-21589-admin-takeover.py"],"pushed_at":"2026-10-07T09:10:13Z","released":"2026-10-07T09:10:12Z","repo":1408523550,"rev":"508d2ae01d6fd8a9756fd484b1a417d7f7704aa7bb66ed1b934f7c7c09bf6df8","seen":"2026-10-07T12:09:17Z","sha":"3c08a1ae4fe83563b3f9bafb4855720a2f508ce5","url":"https://github.com/aduli198/CVE-2026-21589"},
 "CVE-2026-21589 github:bimboxh4/cve-2026-21589?#":{"basis":"commit","blobs":["27abcc0574ee699c79fdbaf5e6d9b08799be02ea"],"checked":"2026-10-07T16:09:46Z","commit":"2026-10-07T13:45:58Z","commit_verified":true,"created":"2026-10-07T13:44:41Z","cve":"CVE-2026-21589","head":"b1e96131abe70968708195a1561e00631f9b556a","history_paths":["CVE-2026-21589.py"],"history_version":3,"paths":["CVE-2026-21589.py"],"pushed_at":"2026-10-07T13:45:59Z","released":"2026-10-07T13:45:58Z","repo":1408857126,"rev":"a70f0486d8e3fd2de4a322121eed4619d9b3f124969e8f5272f0373012e74d1d","seen":"2026-10-07T16:09:53Z","sha":"b1e96131abe70968708195a1561e00631f9b556a","url":"https://github.com/BimBoxH4/CVE-2026-21589"},
-"CVE-2026-21589 github:gotr00t0day/cve-2026-21589?#":{"basis":"pending","checked":"2026-10-11T03:07:59Z","created":"2026-10-09T19:15:01Z","cve":"CVE-2026-21589","head":"c8693a427f8d2df54b3c1308cfef4eef52c032e5","pending":true,"pushed_at":"2026-10-09T19:17:27Z","released":null,"repo":1412343154,"seen":"2026-10-09T20:08:35Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"},
+"CVE-2026-21589 github:gotr00t0day/cve-2026-21589?#":{"basis":"pending","checked":"2026-10-11T15:08:37Z","created":"2026-10-09T19:15:01Z","cve":"CVE-2026-21589","head":"c8693a427f8d2df54b3c1308cfef4eef52c032e5","pending":true,"pushed_at":"2026-10-09T19:17:27Z","released":null,"repo":1412343154,"seen":"2026-10-09T20:08:35Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"},
 "CVE-2026-21589 github:marcusprogram/cve-2026-21589?#":{"basis":"commit","blobs":["ea6d9269d791f32f99dced1a1ac1d3c83ba8a54a"],"checked":"2026-10-06T22:56:53Z","commit":"2026-10-06T15:51:43Z","commit_verified":true,"created":"2026-10-06T15:43:34Z","cve":"CVE-2026-21589","head":"52c0899dad92ea6a6a1f8d33818ec100843d0009","history_paths":["cve-2026-21589.py"],"history_version":3,"imported":true,"paths":["cve-2026-21589.py"],"pushed_at":"2026-10-06T15:51:43Z","released":"2026-10-06T15:51:43Z","repo":1407557235,"rev":"fe3cdf4367adb0a2c3026a3d954c204e7ec7c4ec39166ee2ceaeda7c0438ac43","sha":"52c0899dad92ea6a6a1f8d33818ec100843d0009","url":"https://github.com/MarcusProgram/CVE-2026-21589"},
 "CVE-2026-21589 github:murrez/cve-2026-21589?#":{"basis":"commit","blobs":["136f712815092e8114cfff8de174fd243a3e49d2"],"checked":"2026-10-08T09:08:34Z","commit":"2026-10-08T08:31:47Z","commit_verified":true,"created":"2026-10-08T08:31:03Z","cve":"CVE-2026-21589","head":"fee5ad1221487ba4ee139a062c4b1582b1501310","history_paths":["poc.py"],"history_version":3,"paths":["poc.py"],"pushed_at":"2026-10-08T08:31:48Z","released":"2026-10-08T08:31:47Z","repo":1409993065,"rev":"e07b250487408e0be4668aaf8fc0c559a86b79dc22c678fc16cdb021077e009c","seen":"2026-10-08T09:08:36Z","sha":"fee5ad1221487ba4ee139a062c4b1582b1501310","url":"https://github.com/murrez/CVE-2026-21589"},
 "CVE-2026-21589 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml?#":{"basis":"unknown","cve":"CVE-2026-21589","released":null,"seen":"2026-10-07T11:11:43Z","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml"},
@@ -5424,7 +5424,7 @@
 "CVE-2026-3180 https://www.exploit-db.com/exploits/52609":{"basis":"source","cve":"CVE-2026-3180","imported":true,"released":"2026-06-05","source":"2026-06-05","url":"https://www.exploit-db.com/exploits/52609"},
 "CVE-2026-31801 github:advisories/ghsa-85jx-fm8m-x8c6?#":{"basis":"unknown","cve":"CVE-2026-31801","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-85jx-fm8m-x8c6"},
 "CVE-2026-31802 github:advisories/ghsa-9ppj-qmqm-q256?#":{"basis":"unknown","cve":"CVE-2026-31802","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-9ppj-qmqm-q256"},
-"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-11T12:08:01Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"9a10623150a162f32883e0f1bd373acdc139b93b","imported":true,"pending":true,"pushed_at":"2026-10-11T11:25:06Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"},
+"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-11T15:08:04Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"d112919c58acbefa20eba9048d3fafb0020d5721","imported":true,"pending":true,"pushed_at":"2026-10-11T14:25:19Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"},
 "CVE-2026-31807 github:advisories/ghsa-5hc8-qmg8-pw27?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-5hc8-qmg8-pw27"},
 "CVE-2026-31807 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml"},
 "CVE-2026-31809 github:advisories/ghsa-pmc9-f5qr-2pcr?#":{"basis":"unknown","cve":"CVE-2026-31809","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-pmc9-f5qr-2pcr"},
@@ -7539,7 +7539,7 @@
 "CVE-2026-43499 github:k-o-n-t-o-r/ghostlock-sabrina?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/k-o-n-t-o-r/ghostlock-sabrina"},
 "CVE-2026-43499 github:kananosa/cve-2026-43499-for-xiaomi-17t-chagall?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall"},
 "CVE-2026-43499 github:kelsidavis/lg-g710tm-unlock?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kelsidavis/lg-g710tm-unlock"},
-"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-11T14:08:01Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"a8da98894af723e1c9bff6523b1a9fc354293cd4","imported":true,"pending":true,"pushed_at":"2026-10-11T13:09:50Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"},
+"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-11T15:08:04Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"83f574eeabd1dd31c6c968fc8afaac2bfc2af30f","imported":true,"pending":true,"pushed_at":"2026-10-11T14:31:44Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"},
 "CVE-2026-43499 github:kurtulusakyuz/ionstack_s21?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/kurtulusakyuz/IonStack_S21"},
 "CVE-2026-43499 github:l-1124/rootmyvivo-exploit?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-Exploit"},
 "CVE-2026-43499 github:l-1124/rootmyvivo-rs?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-rs"},
@@ -10,7 +10,7 @@
  "pushed": "2026-08-20T21:56:15Z",
  "released": null,
  "basis": "pending",
-  "score": 3.215428039572369,
+  "score": 3.2136396315188316,
  "trending": true,
  "created": "2026-08-15T20:57:13Z",
  "cve": "CVE-2026-9830",
@@ -27,7 +27,7 @@
  "pushed": "2026-09-29T06:20:46Z",
  "released": "2026-09-29T06:20:46Z",
  "basis": "commit",
-  "score": 1.6936776685401498,
+  "score": 1.6899614049199727,
  "trending": true,
  "created": "2026-02-05T10:21:22Z",
  "cve": "CVE-2026-41096",
@@ -44,7 +44,7 @@
  "pushed": "2026-07-27T19:12:07Z",
  "released": "2026-07-24T03:30:17Z",
  "basis": "commit",
-  "score": 1.6639593894189357,
+  "score": 1.663353222661706,
  "trending": true,
  "created": "2026-07-23T18:54:34Z",
  "cve": "CVE-2026-54121",
@@ -61,7 +61,7 @@
  "pushed": "2026-08-22T04:49:54Z",
  "released": "2026-08-22T04:49:54Z",
  "basis": "commit",
-  "score": 1.2688591927706485,
+  "score": 1.2681357926117063,
  "trending": true,
  "created": "2026-08-22T04:49:33Z",
  "cve": "CVE-2026-62911",
@@ -78,7 +78,7 @@
  "pushed": "2026-09-11T16:33:14Z",
  "released": null,
  "basis": "pending",
-  "score": 0.9008680665296941,
+  "score": 0.9000143190050764,
  "trending": true,
  "created": "2026-09-10T11:28:38Z",
  "cve": "CVE-2026-20805",
@@ -95,7 +95,7 @@
  "pushed": "2026-09-12T00:03:49Z",
  "released": null,
  "basis": "pending",
-  "score": 0.8678609179914992,
+  "score": 0.8670300473408519,
  "trending": true,
  "created": "2026-09-12T00:03:07Z",
  "cve": "CVE-2026-21858",
@@ -112,7 +112,7 @@
  "pushed": "2026-09-29T07:52:23Z",
  "released": "2026-09-29T07:57:18Z",
  "basis": "created",
-  "score": 0.8675385264665322,
+  "score": 0.8656253769896873,
  "trending": true,
  "created": "2026-09-29T07:57:18Z",
  "cve": "CVE-2026-94545",
@@ -129,29 +129,12 @@
  "pushed": "2026-08-26T02:23:55Z",
  "released": "2026-08-25T19:06:37Z",
  "basis": "created",
-  "score": 0.7576668489776524,
+  "score": 0.7572024225113181,
  "trending": true,
  "created": "2026-08-25T19:06:37Z",
  "cve": "CVE-2026-75604",
  "kev": false
 },
- {
-  "year": 2026,
-  "stars": 7,
-  "name": "cve-2026-43499-honor",
-  "url": "https://github.com/knowlily/cve-2026-43499-honor",
-  "artifact": false,
-  "source": "github.com",
-  "desc": "CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.",
-  "pushed": "2026-10-11T13:05:41Z",
-  "released": null,
-  "basis": "pending",
-  "score": 0.733820377207981,
-  "trending": true,
-  "created": "2026-08-15T15:18:19Z",
-  "cve": "CVE-2026-43499",
-  "kev": false
- },
 {
  "year": 2026,
  "stars": 86,
@@ -163,12 +146,29 @@
  "pushed": "2026-09-03T20:38:35Z",
  "released": null,
  "basis": "pending",
-  "score": 0.7189754893949888,
+  "score": 0.7184317373500446,
  "trending": true,
  "created": "2026-09-02T20:12:10Z",
  "cve": "CVE-2026-65343",
  "kev": false
 },
+ {
+  "year": 2026,
+  "stars": 7,
+  "name": "cve-2026-43499-honor",
+  "url": "https://github.com/knowlily/cve-2026-43499-honor",
+  "artifact": false,
+  "source": "github.com",
+  "desc": "CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.",
+  "pushed": "2026-10-11T13:05:41Z",
+  "released": null,
+  "basis": "pending",
+  "score": 0.7139081609870392,
+  "trending": true,
+  "created": "2026-08-15T15:18:19Z",
+  "cve": "CVE-2026-43499",
+  "kev": false
+ },
 {
  "year": 2026,
  "stars": 108,
@@ -180,7 +180,7 @@
  "pushed": "2026-08-03T15:31:59Z",
  "released": null,
  "basis": "pending",
-  "score": 0.5969713241477069,
+  "score": 0.5967212181392857,
  "trending": true,
  "created": "2026-08-03T15:29:22Z",
  "cve": "CVE-2026-47301",
@@ -197,12 +197,29 @@
  "pushed": "2026-09-24T02:47:40Z",
  "released": "2026-09-24T02:47:40Z",
  "basis": "commit",
-  "score": 0.5614585753436362,
+  "score": 0.5605692590921338,
  "trending": true,
  "created": "2026-09-24T00:22:30Z",
  "cve": "CVE-2026-84543",
  "kev": false
 },
+ {
+  "year": 2026,
+  "stars": 109,
+  "name": "CVE-2026-43499-Poc-Analysis",
+  "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
+  "artifact": false,
+  "source": "github.com",
+  "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
+  "pushed": "2026-07-18T21:09:06Z",
+  "released": null,
+  "basis": "pending",
+  "score": 0.5224092054904844,
+  "trending": true,
+  "created": "2026-07-14T14:21:27Z",
+  "cve": "CVE-2026-43499",
+  "kev": false
+ },
 {
  "year": 2026,
  "stars": 39,
@@ -214,29 +231,12 @@
  "pushed": "2026-09-22T19:36:47Z",
  "released": null,
  "basis": "pending",
-  "score": 0.521988408007041,
+  "score": 0.5212158379884381,
  "trending": true,
  "created": "2026-09-22T18:40:26Z",
  "cve": "CVE-2026-87902",
  "kev": true
 },
- {
-  "year": 2026,
-  "stars": 108,
-  "name": "CVE-2026-43499-Poc-Analysis",
-  "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
-  "artifact": false,
-  "source": "github.com",
-  "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
-  "pushed": "2026-07-18T21:09:06Z",
-  "released": null,
-  "basis": "pending",
-  "score": 0.5177935067017085,
-  "trending": true,
-  "created": "2026-07-14T14:21:27Z",
-  "cve": "CVE-2026-43499",
-  "kev": false
- },
 {
  "year": 2026,
  "stars": 31,
@@ -248,7 +248,7 @@
  "pushed": "2026-09-27T19:48:09Z",
  "released": "2026-09-27T19:47:52Z",
  "basis": "commit",
-  "score": 0.5090229441135781,
+  "score": 0.508014672553763,
  "trending": true,
  "created": "2026-09-27T19:41:06Z",
  "cve": "CVE-2026-34990",
@@ -265,7 +265,7 @@
  "pushed": "2026-10-07T01:07:28Z",
  "released": "2026-09-22T18:13:48Z",
  "basis": "created",
-  "score": 0.4674978201537812,
+  "score": 0.46680790611795125,
  "trending": true,
  "created": "2026-09-22T18:13:48Z",
  "cve": "CVE-2026-87902",
@@ -282,7 +282,7 @@
  "pushed": "2026-09-28T05:17:40Z",
  "released": "2026-09-28T05:17:40Z",
  "basis": "commit",
-  "score": 0.43511797360610527,
+  "score": 0.4342324185150079,
  "trending": true,
  "created": "2026-09-28T04:47:10Z",
  "cve": "CVE-2026-85706",
@@ -299,7 +299,7 @@
  "pushed": "2026-09-11T16:38:12Z",
  "released": "2026-09-11T15:54:48Z",
  "basis": "commit",
-  "score": 0.4208035123772114,
+  "score": 0.4204050630523837,
  "trending": true,
  "created": "2026-09-11T15:24:22Z",
  "cve": "CVE-2026-85706",
@@ -307,7 +307,7 @@
 },
 {
  "year": 2026,
-  "stars": 86,
+  "stars": 87,
  "name": "Android-CVE-2026-43499",
  "url": "https://github.com/CakesTwix/Android-CVE-2026-43499",
  "artifact": false,
@@ -316,7 +316,7 @@
  "pushed": "2026-07-13T13:32:26Z",
  "released": null,
  "basis": "pending",
-  "score": 0.3953061648135951,
+  "score": 0.3997739957097059,
  "trending": true,
  "created": "2026-07-13T13:31:55Z",
  "cve": "CVE-2026-43499",
@@ -324,19 +324,19 @@
 },
 {
  "year": 2026,
-  "stars": 13,
-  "name": "watchTowr-vs-Atlassian-CVE-2026-21589",
-  "url": "https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589",
+  "stars": 44,
+  "name": "CVE-2026-28576-poc",
+  "url": "https://github.com/mobilehackinglab/CVE-2026-28576-poc",
  "artifact": false,
  "source": "github.com",
-  "desc": "h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. h3. Context This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. h3. Details: * The vulnerability must be addressed for affected versions of: Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.1, 7.2.4 Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 Crucible, fix versions 4.9.15 Fisheye, fix version 4.9.15 * Exploitation requires prior knowledge of the target file's exact name and path. * The vulnerability does not include the capability to enumerate or list directory contents.",
-  "pushed": "2026-10-06T10:48:38Z",
-  "released": "2026-10-06T10:48:38Z",
-  "basis": "commit",
-  "score": 0.39452324915642545,
+  "desc": "SQL injection vulnerability in Android 17 (AOSP)",
+  "pushed": "2026-09-07T08:42:12Z",
+  "released": null,
+  "basis": "pending",
+  "score": 0.39275600499143903,
  "trending": true,
-  "created": "2026-10-06T10:40:59Z",
-  "cve": "CVE-2026-21589",
+  "created": "2026-09-07T09:25:30Z",
+  "cve": "CVE-2026-28576",
  "kev": false
 },
 {
@@ -350,7 +350,7 @@
  "pushed": "2026-10-03T08:14:17Z",
  "released": null,
  "basis": "pending",
-  "score": 0.3873349203016823,
+  "score": 0.3861109929687138,
  "trending": true,
  "created": "2026-04-07T12:02:52Z",
  "cve": "CVE-2024-56426",
@@ -367,7 +367,7 @@
  "pushed": "2026-08-10T23:15:22Z",
  "released": "2026-08-10T23:15:36Z",
  "basis": "created",
-  "score": 0.13139190112809657,
+  "score": 0.13133040385474543,
  "trending": true,
  "created": "2026-08-10T23:15:36Z",
  "cve": "CVE-2025-7771",
@@ -384,7 +384,7 @@
  "pushed": "2026-09-17T02:22:58Z",
  "released": "2026-09-17T02:22:58Z",
  "basis": "commit",
-  "score": 0.08963285773995999,
+  "score": 0.08952988419577762,
  "trending": true,
  "created": "2026-09-16T23:32:09Z",
  "cve": "CVE-2025-32432",
@@ -401,7 +401,7 @@
  "pushed": "2026-08-27T07:13:42Z",
  "released": null,
  "basis": "pending",
-  "score": 0.0737929317649683,
+  "score": 0.07374621678455531,
  "trending": true,
  "created": "2026-08-19T09:39:46Z",
  "cve": "CVE-2025-21479",
@@ -418,7 +418,7 @@
  "pushed": "2026-08-20T01:33:10Z",
  "released": "2026-08-20T01:20:07Z",
  "basis": "commit",
-  "score": 0.04665560035083316,
+  "score": 0.04663005954342793,
  "trending": true,
  "created": "2026-08-20T01:13:39Z",
  "cve": "CVE-2025-21479",
@@ -435,7 +435,7 @@
  "pushed": "2026-08-02T06:48:32Z",
  "released": "2026-07-28T09:37:42Z",
  "basis": "commit",
-  "score": 0.041650072376883035,
+  "score": 0.04163404821420622,
  "trending": true,
  "created": "2026-07-28T06:41:38Z",
  "cve": "CVE-2025-21479",
@@ -452,7 +452,7 @@
  "pushed": "2026-08-06T14:58:53Z",
  "released": "2026-08-06T14:58:53Z",
  "basis": "commit",
-  "score": 0.039888739284284304,
+  "score": 0.03987128026654548,
  "trending": true,
  "created": "2026-08-06T13:52:33Z",
  "cve": "CVE-2025-8045",
@@ -469,7 +469,7 @@
  "pushed": "2026-07-22T19:46:33Z",
  "released": null,
  "basis": "pending",
-  "score": 0.029730333620853946,
+  "score": 0.029719671507433897,
  "trending": true,
  "created": "2026-07-22T19:43:34Z",
  "cve": "CVE-2023-36003",
@@ -486,7 +486,7 @@
  "pushed": "2026-08-15T06:21:41Z",
  "released": null,
  "basis": "pending",
-  "score": 0.025107911987549907,
+  "score": 0.025095292407376405,
  "trending": true,
  "created": "2026-08-15T06:12:04Z",
  "cve": "CVE-2024-56426",
@@ -503,7 +503,7 @@
  "pushed": "2026-07-21T16:55:33Z",
  "released": null,
  "basis": "pending",
-  "score": 0.024540735903549212,
+  "score": 0.024532056689110494,
  "trending": true,
  "created": "2026-07-21T16:52:22Z",
  "cve": "CVE-2025-32432",
@@ -520,7 +520,7 @@
  "pushed": "2026-08-28T00:05:41Z",
  "released": "2026-08-28T00:05:42Z",
  "basis": "created",
-  "score": 0.022376229706838932,
+  "score": 0.02236184611687834,
  "trending": true,
  "created": "2026-08-28T00:05:42Z",
  "cve": "CVE-2025-3248",
@@ -537,7 +537,7 @@
  "pushed": "2026-08-18T01:39:34Z",
  "released": null,
  "basis": "pending",
-  "score": 0.019491742416742435,
+  "score": 0.019481453527581547,
  "trending": true,
  "created": "2026-08-18T02:31:53Z",
  "cve": "CVE-2025-21479",
@@ -554,7 +554,7 @@
  "pushed": "2026-07-19T11:00:00Z",
  "released": "2026-07-19T11:00:00Z",
  "basis": "commit",
-  "score": 0.019268419891535698,
+  "score": 0.019261785097115132,
  "trending": true,
  "created": "2026-07-19T10:49:05Z",
  "cve": "CVE-2025-64512",
@@ -571,7 +571,7 @@
  "pushed": "2026-07-17T13:55:11Z",
  "released": null,
  "basis": "pending",
-  "score": 0.018976297764235796,
+  "score": 0.018969904557434938,
  "trending": true,
  "created": "2026-07-17T13:46:16Z",
  "cve": "CVE-2025-8110",
@@ -588,7 +588,7 @@
  "pushed": "2026-07-29T21:15:12Z",
  "released": "2026-07-29T21:15:12Z",
  "basis": "commit",
-  "score": 0.015835367341115788,
+  "score": 0.015829152507017052,
  "trending": true,
  "created": "2026-07-29T19:59:36Z",
  "cve": "CVE-2024-36104",
@@ -605,7 +605,7 @@
  "pushed": "2026-07-27T07:00:54Z",
  "released": "2026-07-27T06:52:27Z",
  "basis": "commit",
-  "score": 0.015460761339705031,
+  "score": 0.015454896765870823,
  "trending": true,
  "created": "2026-07-27T06:51:21Z",
  "cve": "CVE-2023-52076",
@@ -622,7 +622,7 @@
  "pushed": "2026-07-20T13:33:10Z",
  "released": "2026-07-20T13:33:10Z",
  "basis": "commit",
-  "score": 0.01458424923151477,
+  "score": 0.014579161267018657,
  "trending": true,
  "created": "2026-02-13T22:26:25Z",
  "cve": "CVE-2025-6019",
@@ -639,7 +639,7 @@
  "pushed": "2026-10-08T15:42:17Z",
  "released": "2025-09-09T01:31:54Z",
  "basis": "commit",
-  "score": 0.009810316318049074,
+  "score": 0.009809594163086533,
  "trending": true,
  "created": "2025-09-08T21:12:19Z",
  "cve": "CVE-2022-22077",