CVE-2026-69100Proof of concept (PoC) published · CISA
LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution
CVSS score
8.7
EPSS probability
%1.0
Risk score
0.1
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.1
CVE-2026-110609
Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter
D
Patch status unknown
9.3
CVE-2026-107780
Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter
D
Patch status unknownEPSS %2
5.3
CVE-2026-92993
Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
D
Patch verifiedEPSS %1
9.3
CVE-2026-69102
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
D
Patch verifiedEPSS %1
9.3
CVE-2026-107779
Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE
D
Patch status unknownEPSS %1
8.5
CVE-2026-67345
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
D
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-69100"