Related VulnerabilitiesPoCCVE-2026-26216: Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks ParameterPoCCVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp ParameterPoCCVE-2026-55549: Yamcs <=5.8.6 - Cross-Site ScriptingPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site ScriptingPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingPoCCVE-2026-42878: FacturaScripts - Unauthenticated phpinfo DisclosurePoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting