Related VulnerabilitiesPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code InjectionPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path TraversalPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2026-85706: GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File ReadPoCCVE-2026-3395: MaxSite CMS <=109.1 - Remote Code ExecutionPoCCVE-2006-2842: Squirrelmail <=1.4.6 - Local File InclusionPoCCVE-2007-4504: Joomla! RSfiles <=1.0.2 - Local File InclusionPoCCVE-2008-1061: WordPress Sniplets <=1.2.2 - Cross-Site ScriptingPoCCVE-2009-4223: KR-Web <=1.1b2 - Remote File InclusionPoCCVE-2015-2196: WordPress Spider Calendar <=1.4.9 - SQL InjectionPoCCVE-2015-9312: NewStatPress <=1.0.4 - Cross-Site ScriptingPoCCVE-2015-9414: WordPress Symposium <=15.8.1 - Cross-Site Scripting