CVE-2026-77142Suited to automated attack · CISA
Broken Access Control in extension "Industry Directory" (yellowpages2)
CVSS score
8.8
EPSS probability
%0.4
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.5
CVE-2026-77136
Server-Side Template Injection in extension "powermail" (powermail)
T
Patch status unknownEPSS %1
9.3
CVE-2026-77138
Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
T
Patch status unknownEPSS %1
8.8
CVE-2026-77141
Broken Access Control in extension "Club Directory" (clubdirectory)
T
Patch status unknownEPSS %0
8.8
CVE-2026-77143
Broken Access Control in extension "Forum" (pforum)
T
Patch status unknownEPSS %0
8.7
CVE-2026-77140
Broken Access Control in extension "Telephone Directory" (telephonedirectory)
T
Patch status unknownEPSS %0
8.3
CVE-2026-77146
Broken Access Control in extension "femanager" (femanager)
T
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77142"