CVE•Published 2026-09-01•Modified 2026-09-01•0 articles on news•4 live references•NVD data

CVE-2026-13337

Vulnerability data via NVD (ingested)

CVSS v3.1

—

EPSS percentile

—

Weaknesses (CWE)

CWE-564SQL Injection: Hibernate

Description

CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-service interface or webui.

Timeline

Published 2026-09-01

Modified 2026-09-01

External references

NVD MITRE Exploit-DB VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-13337

Hosts Shodan has explicitly fingerprinted as vulnerable.

More intel sources (5)

vuln:CVE-2026-13337

Country / ASN / product breakdown for the vuln query.

vulnerabilities.cve_id: CVE-2026-13337

Censys host search filtered to this CVE id.

CVE-2026-13337

Public source-code mentions — fast PoC discovery.

CVE-2026-13337

GitHub code search for direct mentions.

"CVE-2026-13337" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-133378 repos

novaestellar/novahakuPython

Novahaku — 统一安全研究代理：Web测试 · 提示工程 · 攻击框架 · 逆向工程 · 请求重构

★ 29·updated 2w ago

2233admin/reverse-skill-evolverPython

Reverse-engineering skills for AI coding agents, with IDA/MCP integration, APK and JavaScript workflows, bounded agent swarms, and routing evaluation.

★ 17·updated today

Correia-jpv/fucking-awesome-javaunknown

A curated list of awesome frameworks, libraries and software for the Java programming language. With repository stars⭐ and forks🍴

★ 4·updated 1d ago

DorianGallo/reverse-skillPowerShell

[AI agents] Skill for reverse engineering with agent assistance

★ 3·updated 3mo ago

EQSTLab/CVE-2026-25253HTML

OpenClaw Authentication Token Exfiltration

★ 2·updated 5mo ago

bugsyhewitt/covenantPython

Necromancer suite: covenant (offensive security tool)

★ 2·updated 1mo ago

yym8538/CVE-2026-25253HTML

★ 1·updated 1mo ago

DDW-X/awesome-agent-skillsPython

<DDW-X> Agentic Knowledge Base: A massive, cross-IDE repository transforming leaked AI system prompts (GPT-5, Claude Fable, DeepSeek) into structured, token-efficient Agent Skills.…

★ 1·updated 2mo ago

We haven't classified any articles referencing CVE-2026-13337 yet. The external references above still apply.