CVE-2026-7120
Vulnerability in Fastify Static
CVSS score
5.3
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)
Makefile Go / Python
GitHub
PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)
Makefile Go / Python
GitHub
PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)
Makefile Go / Python
GitHub
PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2)
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2026-85124Path traversal in Fastify/http Proxy
Patch status unknownEPSS %1
7.5
CVE-2026-15074Path traversal in Fastify Static
Patch status unknownEPSS %1
10.0
CVE-2026-15631Path traversal in Fastify/http Proxy
Patch status unknownEPSS %1
7.5
CVE-2026-18427@fastify/static vulnerable to route guard bypass via non-canonical path segments
Patch status unknownEPSS %1
8.6
CVE-2026-33805Vulnerability in Fastify/http Proxy
Patch status unknown Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-7120"