[POC] CVE-2026-9254 — CVE-2026-9254Aug 18, 2026
pocexploitCVE-2026-9254
TP-Link Archer BE800 V1 — Parental Control LAN RCE
CVE-2026-15826, CVE-2026-15748
CVE-2026-71518 — Typemill <2.26.0 unauthenticated authorization bypass in media file download (path-equivalent URL variants). Advisory + PoC.
CVE-2026-43499 port for Samsung Galaxy A17
Python proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.
CVE-2026-74970 · Fission site isolation bypass in Firefox WebRender
CVE-2026-74945 · Uninitialized heap disclosure via a crafted web font (sec-high)
CVE-2026-74943 · Use after free in Firefox RasterImage (sec-high)
Kernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)
Linuxfabrik monitoring_plugins_6.0.0 - SSRF
flyto-core 2.26.7 - Arbitrary File Write
A poc and write-up for CVE-2026-40345
Isolated Docker lab, static detection scanner, and PoC validation for React2Shell (CVE-2025-55182).
CVE-2026-68138 Linux Local Privilege Escalation Exploit
Tracking CVE-2026-68138, the Linux kernel net/sched qdisc rate-table use-after-free