CriticalPoC Available
CVE-2026-94545
Satori SVG injection affecting Next.js ImageResponse
RCE
Published 6d ago
Tracker
Exploit Radar
PoC, exploit, and active exploitation are separate statuses. If it is not confirmed, the record says Unknown or No PoC.
Filters match the recorded status. Active exploitation is not implied by a proof of concept.
HighPoC Available
CVE-2026-15742
PostgreSQL fuzzystrmatch integer wraparound
RCE
Published 13 Aug 2026
HighPoC Available
CVE-2026-48842
Roundcube virtuser_query SQL injection
SQLi
Published 25 May 2026
CriticalPoC Available
CVE-2026-40281
Gotenberg ExifTool argument injection
Other
Published 6 May 2026