The catalog

Browse Reproductions

191 verified reproductions

Popular records

Top viewed reproduction records

Frequently opened evidence pages with direct links to runnable proof and permanent REPRO IDs.

REPRO-2026-00281 Apache Kafka SASL/OAUTHBEARER accepts unvalidated JWTs CVE-2026-33557 / critical / Apache Kafka REPRO-2026-00222 SimpleHelp OIDC authentication accepts unsigned/forged ID tokens, enabling remote authentication bypass and possible MFA bypass in versions 5.5.15 and earlier and 6.0 prereleases prior to the fixed release. CVE-2026-48558 / critical / SimpleHelp REPRO-2026-00259 iCagenda unauthenticated file upload RCE in public event submission form CVE-2026-48939 / critical / iCagenda REPRO-2026-00275 Coolify terminal WebSocket endpoints lack proper authorization checks, allowing low-privileged members to access terminal functionality and achieve remote command execution on managed hosts. CVE-2026-34047 / critical / coollabsio/coolify REPRO-2026-00223 phpBB authentication bypass/account hijacking via OAuth login-link flow with arbitrary auth_provider=apache CVE-2026-48611 / critical / phpbb/phpbb REPRO-2026-00258 Cudy LT300 3.0 OS command injection CVE-2026-32833 / high / Cudy LT300 V3 firmware