Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
Catalogue scorecard
GCVE
CISA
CIRCL
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Statistics
Log in
About
Search term
Success
← All credits
Mohamed Wagdy (@Kalawy)
2 vulnerability records and advisories credit this contributor.
CVE-2026-115935
Control panel only API response emulation replaces "securityKey" and reaches server RCE
CVE-2026-115938
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE