CVE-2026-4277
Missing authorization in Django
CVSS score
9.8
EPSS probability
%0.5
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2026-42778 EUVD-2026-26492 Deserialization of Untrusted Data (CWE-502)
Makefile Go / Python
GitHub
CVE-2026-42779: Apache MINA AbstractIoBuffer.resolveClass() deserialization filter bypass to RCE (CVSS 9.8)
Makefile Go / Python
Similar Vulnerabilities
5.9
CVE-2021-23336Web Cache Poisoning
Patch verifiedEPSS %41
5.4
CVE-2026-1207SQL injection in Django
Patch verified Public Exploits:2EPSS %13
7.5
8.8
CVE-2026-15307Server-side file-write and request forgery via spatial lookups
Partial patchEPSS %1
9.8
6.5
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-4277"