Related VulnerabilitiesPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-3001: Gutenverse Plugin <= 3.4.6 - Cross-Site ScriptingLangflow /api/v1/custom_component 代码执行漏洞(CVE-2024-37014)PoCCVE-2025-6389: Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_funcPoCCVE-2026-1980: WPBookit <= 1.0.8 - Unauthenticated Customer Information DisclosurePoCCVE-2026-3296: Everest Forms WordPress Plugin <= 3.4.3 - PHP Object InjectionPoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCEPoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞PoCNginxWebUI /Adminpage/Conf/loadOrg 文件读取漏洞NginxWebUI /Api/Nginx/runNginxCmd 命令执行漏洞NginxWebUI /Adminpage/Remote/cmdOver 命令执行漏洞FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)