CVE-2026-76232Proof of concept (PoC) published · CISA
Renovate 31.51.0 before 40.33.0 Command Injection via helmv3
CVSS score
8.4
EPSS probability
%1.0
Risk score
0.1
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.5
CVE-2026-88889
Renovate before 44.14.7 Command Injection via distributionType
R
Patch status unknownEPSS %1
8.4
CVE-2026-76231
Renovate 32.135.0 before 40.33.0 Command Injection via hermit
R
Patch verifiedEPSS %1
8.4
CVE-2026-76230
Renovate 35.63.0 before 40.33.0 Command Injection via npm
R
Patch verifiedEPSS %1
8.4
CVE-2026-76233
Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager
R
Patch verifiedEPSS %1
8.4
CVE-2026-76229
Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize
R
Patch verifiedEPSS %1
8.4
CVE-2026-76228
Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper
R
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-76232"