CVE•Published 2026-06-11•Modified 2026-07-27•0 articles on news•5 live references•NVD data
CVE-2026-4096Hcltech · Devops_plan
Vulnerability data via NVD (ingested)
CVSS v3.1
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS percentile
5
Exploit Prediction Scoring System · top 95% of all CVEs
Description
IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking
Timeline
Published 2026-06-11
Modified 2026-07-27
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag0 hosts
vuln:CVE-2026-4096Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · product
product:"Hcltech Devops Plan"All exposed Hcltech Devops Plan instances — cross-reference with the CVE's affected-version range.
Shodan · banner/body mention
http.html:"Devops Plan"HTTP body or banner mentions "Devops Plan" — catches deploys Shodan didn't identify as a product.
More intel sources (5)
Shodan report
vuln:CVE-2026-4096Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-4096Censys host search filtered to this CVE id.
grep.app
CVE-2026-4096Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-4096GitHub code search for direct mentions.
Google dork
"CVE-2026-4096" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-40968 repos
vxcontrol/pentagiGo
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
klauspost/compressGo
Optimized Go Compression Packages
jtesta/ssh-auditPython
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
0xsyr0/OSCPPowerShell
OSCP Cheat Sheet
wolfSSL/wolfsslC
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 fo…
byJoey/Actions-bbr-v3Shell
同步官方内核更新
adolfousier/opencrabsRust
The all-in-one AI agent living in your terminal. Build landing, mobile apps, backends, manages files, deep research, schedule tasks and events. Self-improving, self-healing, fully …
JPShag/PCILeech-DMA-FirmwareC
The last Pcileech DMA CFW guide you will ever need. Sponsored by DMAPolice.com
We haven't classified any articles referencing CVE-2026-4096 yet. The external references above still apply.