CWE-506

CWE-506 · 4 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-506, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-1118622026-10-19

    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the affected plugin files cont…

    AI risk analysis on Exploit-DB.ai →

  2. CRITICAL 9.8CVE-2026-972302026-09-24

    IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcode…

    AI risk analysis on Exploit-DB.ai →

  3. CRITICAL 9.8CVE-2026-66747public PoC2026-08-05

    Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package (librctl.so), started at boot and run as root und…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.8CVE-2026-958312026-09-22

    Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a …

    AI risk analysis on Exploit-DB.ai →