Tracker

Exploit Radar

PoC, exploit, and active exploitation are separate statuses. If it is not confirmed, the record says Unknown or No PoC.

All 0-Day PoC Exploit Active Exploitation KEV Critical High Medium Low

All classes RCE LPE SSRF SQLi XSS Auth bypass Info disclosure DoS Supply chain Other

Filters match the recorded status. Active exploitation is not implied by a proof of concept.

HighNo PoC

CVE-2026-96748

PyMongo connection-string host injection

Other

Published 11d ago

CriticalPoC Available

CVE-2026-40281

Gotenberg ExifTool argument injection

Other

Published 6 May 2026