
Craftcms-PoC-CVE-2026-31266
Security research on Craft CMS authentication mechanism
authenticationauthentication-authorizationexploitation+3

Security research on Craft CMS authentication mechanism

PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…

The code for personally reproducing the corresponding vulnerability

Proof-of-concept exploit for CVE-2026-8181, an authentication bypass in the Burst Statistics WordPress plugin. Demonstrates remote, unauthenticated…

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter