References https://www.exploit-db.com/exploits/41785 https://nvd.nist.gov/vuln/detail/CVE-2016-9091 https://www.cnvd.org.cn/flaw/show/CNVD-2017-05236 https://www.cvedetails.com/cve/CVE-2016-9091/ https://www.exploit-db.com/exploits/41786 https://bto.bluecoat.com/security-advisory/sa138
Related VulnerabilitiesPoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access ControlPoCCVE-2026-58467: Cockpit CMS <= 2.14.0 - Path Traversal / Local File InclusionPoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data ExposurePoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC SecretPoCCVE-2026-13153: Essential Blocks < 6.4.0 - Information DisclosurePoCCVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code ExecutionPoCCVE-2026-42018: JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth BypassPoCCVE-2026-55549: Yamcs <=5.8.6 - Cross-Site ScriptingPoCCVE-2026-69085: SiYuan <=3.7.2 - SQL InjectionPoCCVE-2026-82456: argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool AccessPoCCVE-2026-84434: WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File UploadPoCCVE-2026-85688: TEN Framework - Arbitrary File Read & WritePoCCVE-2026-86218: N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution