diff --git a/README.md b/README.md index 0a54fdbda9c..83c9a9e55bb 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-19%20Sep%202026%2019%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609191908)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C109-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C201-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609191908)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-19%20Sep%202026%2020%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609192007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C112-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C201-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609192007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,6 +12,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | +| 1⭐ | 24m ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… | +| 1⭐ | 28m ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… | | 0⭐ | 1d ago | [CVE-2025-20260](https://github.com/keyuraghao/CVE-2025-20260) | First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump… | | 1⭐ | 1d ago | [CVE-2026-31802](https://github.com/Recorded-texteditor120/CVE-2026-31802) | Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file… | | 2⭐ | 1d ago | [CVE-2026-93453](https://github.com/Faceless0x7/CVE-2026-93453) | CVE-2026-93453 Exploit - SOGo password reset link poisoning via attacker-controlled Origin header, enabling… | @@ -20,18 +22,16 @@ | 0⭐ | 3d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 2⭐ | 3d ago | KEV [CVE-2026-82329-PoC-Exploit](https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit) | 🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted… | | 1⭐ | 4d ago | [langflow-CVE-2026-17633-PoC](https://github.com/Oscar-Collado/langflow-CVE-2026-17633-PoC) | PoC for CVE-2026-17633 - Authenticated RCE in IBM Langflow OSS 1.0.0-1.10.3 via custom_component endpoint.… | -| 0⭐ | 4d ago | KEV [CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | -| 0⭐ | 5d ago | KEV [CVE-2025-32432](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 3⭐ | 2d ago | [CVE-2026-55781-poc](https://github.com/g17hubH4ck/CVE-2026-55781-poc) | Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field. | -| 16⭐ | 2d ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | +| 16⭐ | 3d ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | | 5⭐ | 3d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | | 526⭐ | 3d ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | -| 3⭐ | 3d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | +| 3⭐ | 4d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | | 3⭐ | 4d ago | [CVE-2026-12944](https://github.com/cflowsec/CVE-2026-12944) | Langflow 1.10.0 urllib SSRF POC | | 16⭐ | 5d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | | 4⭐ | 5d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | @@ -65,7 +65,7 @@ | 4⭐ | 64d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | | 7⭐ | 73d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 78d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | -| 3⭐ | 78d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | +| 3⭐ | 79d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | | 4⭐ | 83d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 86d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 | @@ -85,7 +85,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 3⭐ | 54d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | -| 6⭐ | 58d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | +| 6⭐ | 59d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | | 4⭐ | 73d ago | KEV [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… | | 15⭐ | 76d ago | KEV [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass | diff --git a/cves/2025/CVE-2025-55182.md b/cves/2025/CVE-2025-55182.md index a9397116d89..7a6ee4fbe81 100644 --- a/cves/2025/CVE-2025-55182.md +++ b/cves/2025/CVE-2025-55182.md @@ -341,6 +341,7 @@ A pre-authentication remote code execution vulnerability exists in React Server - https://github.com/xemoneattacker/POC - https://github.com/r3vpwnx/CVE-2025-55182 - https://github.com/r00tVen0m/react2shell-exploit +- https://github.com/mythicemissarymall/zuvmwbnt #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55182.yaml diff --git a/cves/2025/CVE-2025-58434.md b/cves/2025/CVE-2025-58434.md index a503914d042..31a1e2d45dd 100644 --- a/cves/2025/CVE-2025-58434.md +++ b/cves/2025/CVE-2025-58434.md @@ -32,6 +32,7 @@ Flowise is a drag & drop user interface to build a customized large language mod - https://github.com/zer0day-oss/flowise_rce - https://github.com/r3vpwnx/CVE-2025-58434 - https://github.com/EduPuzon/Silentium +- https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58434.yaml diff --git a/cves/2025/CVE-2025-59528.md b/cves/2025/CVE-2025-59528.md index fe11565e659..a31a5c3fb5c 100644 --- a/cves/2025/CVE-2025-59528.md +++ b/cves/2025/CVE-2025-59528.md @@ -34,6 +34,7 @@ Flowise is a drag & drop user interface to build a customized large language mod - https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf - https://github.com/kartik2005221/CVE-2025-58434-AND-59528-POC - https://github.com/zer0day-oss/flowise_rce +- https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59528.yaml diff --git a/cves/2026/CVE-2026-13447.md b/cves/2026/CVE-2026-13447.md new file mode 100644 index 00000000000..43408286d8f --- /dev/null +++ b/cves/2026/CVE-2026-13447.md @@ -0,0 +1,18 @@ +### [CVE-2026-13447](https://www.cve.org/CVERecord?id=CVE-2026-13447) +**MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery** +![](https://img.shields.io/static/v1?label=Vendor&message=inspireui&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=MStore%20API%20%E2%80%93%20Create%20Native%20Android%20%26%20iOS%20Apps%20On%20The%20Cloud&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brightgreen) + +### Description + +The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which decodes and validates Firebase ID token claims (alg, kid, aud, iss) but never calls openssl_verify() or any equivalent to validate the JWT signature against Google's actual public key certificates. This makes it possible for unauthenticated attackers to forge a Firebase Phone Auth JWT signed with a self-generated RSA key pair and impersonate any phone number, resulting in unauthorized access to existing WordPress accounts or creation of new arbitrary accounts. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/abraxas/CVE-2026-13447 diff --git a/cves/2026/CVE-2026-19952.md b/cves/2026/CVE-2026-19952.md new file mode 100644 index 00000000000..1718c660212 --- /dev/null +++ b/cves/2026/CVE-2026-19952.md @@ -0,0 +1,18 @@ +### [CVE-2026-19952](https://www.cve.org/CVERecord?id=CVE-2026-19952) +**Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag** +![](https://img.shields.io/static/v1?label=Vendor&message=shabti&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Frontend%20Admin%20by%20DynamiApps&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20%28%27Path%20Traversal%27%29&color=brightgreen) + +### Description + +The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the move_folders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable without authentication when a form is configured with public visibility (who_can_see='all'), as the required nonce is publicly obtainable from the rendered form. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/abraxas/CVE-2026-19952 diff --git a/cves/2026/CVE-2026-33017.md b/cves/2026/CVE-2026-33017.md index aa505347ff8..c9c17b63829 100644 --- a/cves/2026/CVE-2026-33017.md +++ b/cves/2026/CVE-2026-33017.md @@ -45,6 +45,7 @@ No PoCs from references. - https://github.com/maxprog-svg/CVE-2026-33017 - https://github.com/MaximilianoMeyer/CVE-2026-33017 - https://github.com/Oieua/CVE-2026-33017 +- https://github.com/arensballiu/CVE-2026-33017-langflow-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33017.yaml diff --git a/cves/2026/CVE-2026-33439.md b/cves/2026/CVE-2026-33439.md index 2a2059e2478..4e9c099069f 100644 --- a/cves/2026/CVE-2026-33439.md +++ b/cves/2026/CVE-2026-33439.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/TheMalwareGuardian/CVE-2026-33439 - https://github.com/Ibonok/CVE-2026-33439-PoC - https://github.com/infernosalex/CVE-2026-33439-Python-PoC +- https://github.com/JonasChen0103/CVE-2026-33439-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33439.yaml diff --git a/cves/2026/CVE-2026-81294.md b/cves/2026/CVE-2026-81294.md new file mode 100644 index 00000000000..16e7aa1607b --- /dev/null +++ b/cves/2026/CVE-2026-81294.md @@ -0,0 +1,18 @@ +### [CVE-2026-81294](https://www.cve.org/CVERecord?id=CVE-2026-81294) +**WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=Paul%20Ryan&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Authorizer&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-266%20Incorrect%20Privilege%20Assignment&color=brightgreen) + +### Description + +Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/abraxas/CVE-2026-81294 diff --git a/docs/hero.svg b/docs/hero.svg index 7969b8eaddc..dd4e04889da 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 83,112 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 172,354 + fill="#e6edf3" letter-spacing="-0.5">172,357 CVES INDEXED83,109 + fill="#2f81f7" letter-spacing="-0.5">83,112 WITH POCS1,201 diff --git a/docs/social-card.svg b/docs/social-card.svg index 0792929f441..e26567604ba 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 172,354 + fill="#e6edf3" letter-spacing="-0.5">172,357 CVES INDEXED83,109 + fill="#2f81f7" letter-spacing="-0.5">83,112 WITH POCS1,201 diff --git a/docs/stats.json b/docs/stats.json index bd6ee49ea4f..fcf94265f3f 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1201, - "total_cves": 172354, - "with_pocs": 83109 + "total_cves": 172357, + "with_pocs": 83112 } diff --git a/index/github.txt b/index/github.txt index 3b91f42b14a..a85f834ed4f 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26707,3 +26707,11 @@ CVE-2026-78159 - https://github.com/abraxas/CVE-2026-78159 CVE-2026-80844 - https://github.com/0xBlackash/CVE-2026-80844 CVE-2026-81000 - https://github.com/0xBlackash/CVE-2026-81000 CVE-2026-75816 - https://github.com/abraxas/CVE-2026-75816 +CVE-2025-55182 - https://github.com/mythicemissarymall/zuvmwbnt +CVE-2025-58434 - https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset +CVE-2025-59528 - https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528 +CVE-2026-13447 - https://github.com/abraxas/CVE-2026-13447 +CVE-2026-19952 - https://github.com/abraxas/CVE-2026-19952 +CVE-2026-33017 - https://github.com/arensballiu/CVE-2026-33017-langflow-rce +CVE-2026-33439 - https://github.com/JonasChen0103/CVE-2026-33439-PoC +CVE-2026-81294 - https://github.com/abraxas/CVE-2026-81294 diff --git a/index/trending.json b/index/trending.json index 2036543c7db..a14bf882a8a 100644 --- a/index/trending.json +++ b/index/trending.json @@ -472,6 +472,30 @@ "cve": "CVE-2023-32315", "kev": true }, + { + "year": 2025, + "stars": 1, + "name": "Flowise-RCE-CVE-2025-59528", + "url": "https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528", + "desc": "Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability in the /api/v1/node-load-method/customMCP endpoint to execute arbitrary system commands via Node.js child_process.execSync(). Includes full PoC script and remediation steps.", + "pushed": "2026-09-19T19:44:25Z", + "created": "2026-04-15T12:47:25Z", + "cve": "CVE-2025-59528", + "kev": false, + "landed": true + }, + { + "year": 2025, + "stars": 1, + "name": "Flowise-CVE-2025-58434-PasswordReset", + "url": "https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset", + "desc": "Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-concept script and mitigation guidelines.", + "pushed": "2026-09-19T19:41:07Z", + "created": "2026-04-15T12:40:16Z", + "cve": "CVE-2025-58434", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -567,29 +591,5 @@ "cve": "CVE-2026-17633", "kev": false, "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-24813", - "url": "https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813", - "desc": "Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files:- writes enabled for the default servlet (disabled by default)- support for partial PUT (enabled by default)- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads- attacker knowledge of the names of security sensitive files being uploaded- the security sensitive files also being uploaded via partial PUTIf all of the following were true, a malicious user was able to perform remote code execution:- writes enabled for the default servlet (disabled by default)- support for partial PUT (enabled by default)- application was using Tomcat's file based session persistence with the default storage location- application included a library that may be leveraged in a deserialization attackUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.", - "pushed": "2026-09-15T15:04:01Z", - "created": "2026-09-15T15:01:10Z", - "cve": "CVE-2025-24813", - "kev": true, - "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-32432", - "url": "https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432", - "desc": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.", - "pushed": "2026-09-14T10:28:44Z", - "created": "2026-09-14T10:19:44Z", - "cve": "CVE-2025-32432", - "kev": true, - "landed": true } ]