CVE-2026-5158
PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block
CVSS score
6.4
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
rt26cx21x64.sys exploit (Realtek PCIe GbE/2.5GbE/5GbE family)
Makefile Go / Python
Similar Vulnerabilities
5.4
CVE-2026-8145
WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'
W
Patch status unknown
7.2
CVE-2026-96840
Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field
W
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-5158"