diff --git a/README.md b/README.md
index 11409d6d262..a6f391ab9f0 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -14,23 +14,23 @@
| Stars | Released | PoC | Description |
| --- | --- | --- | --- |
-| 0⭐ | 1h ago | [CVE-2026-61424](https://github.com/theendofabbys/CVE-2026-61424) | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The… |
-| 0⭐ | 1h ago |

[CVE-2026-56291](https://github.com/theendofabbys/CVE-2026-56291) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla… |
-| 0⭐ | 5h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… |
-| 0⭐ | 7h ago | [CVE_2024_38063_homelab](https://github.com/ntru0/CVE_2024_38063_homelab) | Windows TCP/IP Remote Code Execution Vulnerability |
-| 0⭐ | 9h ago | [CVE-2026-105844](https://github.com/murrez/CVE-2026-105844) | CVE-2026-105844 - Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321,… |
-| 1⭐ | 9h ago | [CVE-2026-102782](https://github.com/murrez/CVE-2026-102782) | CVE-2026-102782 - OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC:… |
-| 0⭐ | 10h ago | [CVE-2026-102253-POC](https://github.com/Ravi-lk/CVE-2026-102253-POC) | DOS infinite-loop Vulnerability POC |
-| 0⭐ | 10h ago |

[CVE-2026-24061-Telnet-Authentication-Bypass](https://github.com/Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass) | Telnet 2.7 Authentication Bypass and Privilege Escalation / Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki… |
-| 0⭐ | 12h ago | [CVE-2026-101162-xss-wp-ultimate-review](https://github.com/Hasyros/CVE-2026-101162-xss-wp-ultimate-review) | The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings… |
-| 0⭐ | 12h ago | [wpexploit-CVE-2026-96451](https://github.com/MRdark-ops/wpexploit-CVE-2026-96451) | Privilege Escalation vulnerability |
+| 0⭐ | 28m ago | [CVE-2026-21589](https://github.com/rxsklife/CVE-2026-21589) | CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight… |
+| 0⭐ | 37m ago | [CVE-2026-105192](https://github.com/rxsklife/CVE-2026-105192) | CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache… |
+| 0⭐ | 2h ago | [CVE-2026-61424](https://github.com/theendofabbys/CVE-2026-61424) | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The… |
+| 0⭐ | 2h ago |

[CVE-2026-56291](https://github.com/theendofabbys/CVE-2026-56291) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla… |
+| 0⭐ | 6h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… |
+| 0⭐ | 8h ago | [CVE_2024_38063_homelab](https://github.com/ntru0/CVE_2024_38063_homelab) | Windows TCP/IP Remote Code Execution Vulnerability |
+| 0⭐ | 10h ago | [CVE-2026-105844](https://github.com/murrez/CVE-2026-105844) | CVE-2026-105844 - Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321,… |
+| 1⭐ | 10h ago | [CVE-2026-102782](https://github.com/murrez/CVE-2026-102782) | CVE-2026-102782 - OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC:… |
+| 0⭐ | 11h ago | [CVE-2026-102253-POC](https://github.com/Ravi-lk/CVE-2026-102253-POC) | DOS infinite-loop Vulnerability POC |
+| 0⭐ | 11h ago |

[CVE-2026-24061-Telnet-Authentication-Bypass](https://github.com/Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass) | Telnet 2.7 Authentication Bypass and Privilege Escalation / Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki… |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 826⭐ | 4d ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
-| 416⭐ | 4d ago |

[cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
+| 425⭐ | 4d ago |

[cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
| 498⭐ | 48d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
| 96⭐ | 8d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
| 332⭐ | 72d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
@@ -46,7 +46,7 @@
| 38⭐ | 15d ago |

[cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
| 35⭐ | 1d ago |

[CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
| 107⭐ | 81d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
-| 25⭐ | 9d ago |

[CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read |
+| 25⭐ | 10d ago |

[CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read |
| 23⭐ | 9d ago |

[watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… |
| 43⭐ | 26d ago |

[cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
@@ -90,7 +90,7 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 7⭐ | 3h ago | [CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver… |
+| 7⭐ | 4h ago | [CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver… |
diff --git a/cves/2026/CVE-2026-105192.md b/cves/2026/CVE-2026-105192.md
new file mode 100644
index 00000000000..264dd7d0b2f
--- /dev/null
+++ b/cves/2026/CVE-2026-105192.md
@@ -0,0 +1,19 @@
+### [CVE-2026-105192](https://www.cve.org/CVERecord?id=CVE-2026-105192)
+**LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization**
+
+
+
+
+
+
+### Description
+
+LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server is still decoding request arguments and before the handler runs. A single unauthenticated ZMQ DEALER message to the transport port (default 5555) therefore executes code as the user the LMCache process runs as. Official container images run that process as root. The transport binds to localhost unless the operator sets a routable address with --host, which is how multi-node deployments let peers connect.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/rxsklife/CVE-2026-105192
diff --git a/cves/2026/CVE-2026-21589.md b/cves/2026/CVE-2026-21589.md
index 0d3d56f3bab..e283f76a38d 100644
--- a/cves/2026/CVE-2026-21589.md
+++ b/cves/2026/CVE-2026-21589.md
@@ -47,6 +47,7 @@ No PoCs from references.
- https://github.com/aduli198/CVE-2026-21589
- https://github.com/0xBlackash/CVE-2026-21589
- https://github.com/BimBoxH4/CVE-2026-21589
+- https://github.com/rxsklife/CVE-2026-21589
#### Nuclei
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml
diff --git a/docs/hero.svg b/docs/hero.svg
index 0dd4503dc20..2bcd588e521 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@