{"schema":"vulnpedia.poc/1","cve":"CVE-2026-64849","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-08-19","ransomware":false},"epss":{"score":0.10017,"percentile":0.95581},"cvss":{"version":"3.1","score":9.3,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0ee6e9a8ebb6","executable":false,"sourceId":"0ee6e9a8ebb6","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0ee6e9a8ebb6","modified":"2026-08-18T00:00:00Z","url":"https://vulncheck.com/xdb/0ee6e9a8ebb6"}],"repositoryUrl":"https://github.com/isaca0315/CVE-2026-64849-poc-lab"}],"poc_candidates":[{"url":"https://github.com/codeb0ssx/CVE-2026-64849-PoC","source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-18T22:24:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/codeb0ssx/CVE-2026-64849-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-18T22:24:18Z","url":"https://github.com/codeb0ssx/CVE-2026-64849-PoC"}],"tags":[]},{"url":"https://github.com/BiuTrap/CVE-2026-64849","source":"poc-in-github","sourceId":"CVE-2026-64849","description":"CVE-2026-64849 PoC","modified":"2026-08-19T01:25:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/BiuTrap/CVE-2026-64849"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-19T01:25:09Z","url":"https://github.com/BiuTrap/CVE-2026-64849"}],"tags":[]},{"url":"https://github.com/zavisco/CVE-2026-64849.yaml","source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-19T14:25:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/zavisco/CVE-2026-64849.yaml"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-19T14:25:11Z","url":"https://github.com/zavisco/CVE-2026-64849.yaml"}],"tags":[]},{"url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab","source":"poc-in-github","sourceId":"CVE-2026-64849","description":"este laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah","modified":"2026-09-07T14:42:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-09-07T14:42:30Z","url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab"}],"tags":[]},{"url":"https://github.com/maxprog-svg/CVE-2026-64849","source":"poc-in-github","sourceId":"CVE-2026-64849","description":"CVE-2026-64849 — MLflow SSRF","modified":"2026-10-25T09:19:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/maxprog-svg/CVE-2026-64849"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-10-25T09:19:14Z","url":"https://github.com/maxprog-svg/CVE-2026-64849"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-64849 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-64849/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64849.yaml","template":"http/cves/2026/CVE-2026-64849.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-64849%22&type=repositories","executable":false}]}