CVE-2026-77929
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint
CVSS score
8.7
EPSS probability
%0.9
Risk score
0.1
Published
27 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
5.1
CVE-2026-110626
ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php
M
Patch verified
5.1
CVE-2026-110625
ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php
M
Patch verified
2.1
CVE-2026-110627
ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter
M
Patch verified
9.2
CVE-2026-80138
ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter
M
Patch verifiedEPSS %1
8.6
CVE-2026-100372
ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php
M
Patch verifiedEPSS %1
8.6
CVE-2026-103766
ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
M
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77929"