Related VulnerabilitiesPoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCapache-livy-logs: Apache Livy - Logs ExposedPoCnacos-v3-auth-scope-bypass: Nacos 3.x - Unauthenticated Admin TakeoverApache Log4j2 远程代码执行漏洞（CVE-2021-44228）PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code ExecutionPoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEApache IoTDB 认证绕过与远程代码执行漏洞PoCCVE-2025-13342: DynamiApps Frontend Admin <= 3.28.20 - Unauthenticated Arbitrary Options UpdatePoCCVE-2026-34976: Dgraph <=v25.3.0 - Admin Mutation Missing AuthorizationPoCCVE-2026-45332: Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure