cyberupdates365/ai-cyber-threats-and-cve-mitigation-tracker-2026 Master repository tracking 2026 Enterprise Cybersecurity CVEs, Zero-Day Vulnerabilities, and Agentic AI Threats with actionable fix guides. Create: 2026-07-25 08:51:18 +0000 UTC Push: 2026-07-25 08:51:20 +0000 UTC |

HORKimhab/CVE-2026-54900 CVE-2026-54900 - Draft Create: 2026-07-25 08:42:47 +0000 UTC Push: 2026-07-25 08:42:51 +0000 UTC |

4minx/CVE-2026-50522 CVE-2026-50522 PoC Create: 2026-07-25 08:23:28 +0000 UTC Push: 2026-07-25 08:23:28 +0000 UTC |

0xDVRK/CVE-2026-41651 Create: 2026-07-25 08:13:21 +0000 UTC Push: 2026-07-25 08:13:22 +0000 UTC |

l0lsec/CVE-2020-5148 CVE-2020-5148 - Forced Authentication in the SonicWall UTM SSO Agent. The agent probes unvalidated workstations as Domain Admin, so one outbound web request yields a privileged NTLMv2 hash. Advisory SNWLID-2021-0003. Create: 2026-07-25 07:33:26 +0000 UTC Push: 2026-07-25 07:33:29 +0000 UTC |

l0lsec/CVE-2021-3262 CVE-2021-3262 - Blind SQL Injection in the editOEN parameter of TripSpark VEO Transportation / NovusEDU. Unauthenticated, internet-facing. Payloads, annotated requests, and evidence. Create: 2026-07-25 07:33:14 +0000 UTC Push: 2026-07-25 07:33:15 +0000 UTC |

l0lsec/CVE-2021-26837 CVE-2021-26837 - SQL Injection in the SearchTextbox parameter of HelpSystems/Fortra DeliverNow. Payloads, annotated requests, and evidence. Fixed in 1.2.18. Create: 2026-07-25 07:32:51 +0000 UTC Push: 2026-07-25 07:32:55 +0000 UTC |

l0lsec/CVE-2026-12960 CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74. Create: 2026-07-25 07:07:51 +0000 UTC Push: 2026-07-25 07:07:58 +0000 UTC |

LeoxSoft/CVE-2026-31431 🚀 CVE-2026-31431 - Linux Kernel AF_ALG + splice() Privilege Escalation Exploit (Zero-Day → Root Persistence) Create: 2026-07-25 06:47:57 +0000 UTC Push: 2026-07-25 06:48:34 +0000 UTC |

Rat5ak/CVE-2026-61946-Easy-Appointments-IDOR CVE-2026-61946: Unauthenticated IDOR in Easy Appointments <= 3.12.27 Create: 2026-07-25 05:39:09 +0000 UTC Push: 2026-07-25 05:39:13 +0000 UTC |

cduram/Input-leap---IPC-to-LPE--NotCVE-2026-0015 Create: 2026-07-25 02:00:20 +0000 UTC Push: 2026-09-24 21:40:33 +0000 UTC |

soralis0912/CVE-2022-38181-aristotle-apk Create: 2026-07-25 01:04:26 +0000 UTC Push: 2026-07-25 01:04:30 +0000 UTC |

soralis0912/CVE-2022-38181-aristotle Create: 2026-07-25 01:01:38 +0000 UTC Push: 2026-07-25 01:01:42 +0000 UTC |

theopaid/CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-Field Security Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field Create: 2026-07-24 23:28:47 +0000 UTC Push: 2026-07-28 23:10:21 +0000 UTC |

theopaid/CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io Create: 2026-07-24 22:28:38 +0000 UTC Push: 2026-07-27 17:43:14 +0000 UTC |

theopaid/CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary) Create: 2026-07-24 22:26:45 +0000 UTC Push: 2026-07-27 17:41:31 +0000 UTC |

theopaid/CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash Create: 2026-07-24 22:22:35 +0000 UTC Push: 2026-07-27 17:39:13 +0000 UTC |

tc4dy/CVE-2026-60206-PoC-Exploit 👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit combo/unsigned/xsw/nameid/all, --shodan integration, --tor support, mass scanning, JSON/CSV/JSONL output, cookie validation. 🛡️ CVSS 9.9 Critical - Use Ethically, Stay Legal. 🔒 Create: 2026-07-24 21:44:02 +0000 UTC Push: 2026-07-24 21:44:03 +0000 UTC |

0xgh057r3c0n/CVE-2026-9198 IBM Langflow Unauthenticated RCE via Auto-Login Bypass Create: 2026-07-24 20:50:04 +0000 UTC Push: 2026-07-24 20:50:05 +0000 UTC |

ardakrg/CVE-2026-51592 Path Traversal vulnerability in TahaBakhtari/SubtitleGenerator - CVE-2026-51592 Create: 2026-07-24 17:29:18 +0000 UTC Push: 2026-07-24 17:29:19 +0000 UTC |