CVE-2026-31266
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-31266
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-31266
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-31266
请登录查看更多情报信息。
Proof of Concept for CVE-2026-31266 (1)
Vendor Pages for CVE-2026-31266 (1)
Same Patch Batch · n/a · 2026-05-27 · 28 CVEs total
| CVE-2026-36044 | 8.8 HIGH | @pensar/apex<=0.0.58 OS命令注入 |
| CVE-2026-4390 | 5.4 MEDIUM | TeamSpeak 3 Server Connection State Management process_resend_queue use after free |
| CVE-2026-4391 | 5.3 MEDIUM | TeamSpeak 3 Server ECC Key heap-based overflow |
| CVE-2026-4392 | 5.3 MEDIUM | TeamSpeak 3 Server clientek Handshake assertion |
| CVE-2026-33552 | Mender Enterprise Server <4.1.1 访问控制错误漏洞 | |
| CVE-2026-49009 | Mender Server路径遍历漏洞 | |
| CVE-2025-69600 | Raynet rvia 12.6.4392.49命令注入漏洞 | |
| CVE-2025-67903 | Mender Client 5<5.0.4 存在密码学签名验证绕过漏洞 | |
| CVE-2026-38808 | uzy-ssm-mall v1.1.0 SQL注入漏洞 | |
| CVE-2026-38807 | kvf-admin v1.0.0 不安全权限提升漏洞 | |
| CVE-2025-70116 | GPAC MP4Box NULL指针解引用导致崩溃 | |
| CVE-2025-68712 | AppLock 7.9.40绕过认证漏洞 | |
| CVE-2026-38930 | OpenRapid RapidCMS v1.3.1 认证绕过漏洞 | |
| CVE-2026-38931 | SimplePHP存储型XSS漏洞 | |
| CVE-2026-38945 | Raynet rvia 12.6.4392.49 命令注入漏洞 | |
| CVE-2025-70103 | libjxl 0.12.0 PBM解析堆溢出漏洞 | |
| CVE-2026-30498 | AdminPanel 4.0 CSRF漏洞 | |
| CVE-2026-37711 | Dolibarr远程代码执行漏洞 | |
| CVE-2026-37712 | Dolibarr ERP/CRM远程代码执行漏洞 | |
| CVE-2026-37713 | Dolibarr ERP/CRM 22.x-24.0-alpha 远程代码执行漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-31266
No comments yet