CVE Findings

Discovered and reported 6 CVEs across multiple open-source projects

CVE-2026-22783 CRITICAL

DFIR-IRIS • Arbitrary File Deletion

9.6

CVSS

CVE-2026-22599 CRITICAL

Strapi • SQL Injection in Content Type Builder

9.3

CVSS

CVE-2026-41473 HIGH

CyberPanel • Unauthenticated API Access via AI Scanner Endpoints

8.8

CVSS

CVE-2026-31824 HIGH

Sylius • Race Condition (TOCTOU)

8.2

CVSS

CVE-2026-41472 MEDIUM

CyberPanel • Stored XSS via AI Scanner Dashboard

5.3

CVSS

CVE-2026-31823 MEDIUM

Sylius • Authenticated Stored XSS

4.8

CVSS

6

Total CVEs

2

Critical

2

High

2

Medium