CVE Analysis

2026

• CVE-2026-20127: Cisco Catalyst SD-WAN Authentication Bypass 🐈
• CVE-2026-4609: ProfileGrid Arbitrary Group Joining 🐈
• CVE-2026-4608: ProfileGrid rid SQL Injection 🐈
• CVE-2026-6127: Elementor REST API Stored XSS 🐈
• CVE-2026-3612: Wavlink Command Injection
• CVE-2026-20127: Cisco Catalyst SD-WAN Authentication Bypass
• CVE-2024-4040: CrushFTP Template Injection

2025

• CVE-2025-31344: giflib Heap-based Buffer Overflow
• CVE-2025-24813: Tomcat DefaultServlet Partial PUT
• CVE-2025-54376: Hoverfly WebSocket Auth Bypass

Bold entries are vulnerabilities I discovered and reported 🐈