CVE-2026-92576Proof of concept (PoC) published · CISASuited to automated attack · CISA
HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
CVSS score
9.2
EPSS probability
%0.4
Risk score
0.0
Published
29 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-61808
LightRAG: Missing Authentication for Critical API Functions in Default Configuration
H
Patch status unknown Public Exploits:1EPSS %2
8.8
CVE-2026-40502
Missing authorization in Hkuds Openharness
H
Patch verified Public Exploits:1EPSS %2
5.3
CVE-2026-19243
HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection
H
Patch verifiedEPSS %2
9.3
CVE-2026-86124
AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server
H
Patch status unknownEPSS %1
6.9
CVE-2026-102874
HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection
H
Patch status unknownEPSS %1
6.9
CVE-2026-90809
HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection
H
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-92576"