Related VulnerabilitiesPoCCVE-2026-26265: Discourse - Private User Field Disclosure via Directory Items IDORWordPress Directory Kit 插件敏感信息泄露漏洞(CVE-2025-13920)PoCmixed-active-content: Mixed Active ContentPoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File UploadPoCnodogsplash-lfi: Nodogsplash - Directory TraversalPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE金蝶EAS /ormrpc/services/BSHService 代码执行漏洞广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞广联达OA /GTP/IM/Services/Group/Broadcast/MsgBroadcastContent.aspx SQL 注入漏洞宏景eHR /services/SynToADService XML 外部实体注入漏洞PoCCVE-2024-9362: Polyaxon - Unauthenticated Directory TraversalPoCunauth-mulesoft-dataweave: MuleSoft DataWeave Interactive Learning Environment - Unauthenticated AccessApache ActiveMQ默认口令存在代码注入漏洞(CVE-2026-42588)