Atomicorp WAF Research Notes
Research Update - 2026-10-12
Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.
The entries published in this update represent research notes produced during ongoing analysis activities.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
Presence means a positive research finding was published. Absence means no conclusion should be drawn.
CVE Notes Published in This Update
| CVE | Vulnerability Name | Rules Observed |
|---|---|---|
| CVE-2026-108576 | TOZED X300 IPPingDiagnostics process_ping os command injection | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-21858 | n8n Content-Type Confusion Arbitrary File Read to RCE (CVE-2026-21858) | 344360 , 390709 |
| CVE-2017-12629 | Apache Solr XML External Entity Injection (CVE-2017-12629) | 344360 , 344363 , 344370 , 347009 , 380018 , 390722 , 392301 |
| CVE-2017-7525 | Jackson-databind Deserialization Remote Command Execution (CVE-2017-7525) | 340162 , 340163 , 344380 |
| CVE-2017-8046 | Spring Data REST Remote Code Execution (CVE-2017-8046) | 337209 , 337210 , 337211 , 340095 |
| CVE-2022-22965 | Spring Framework Data Binding Remote Code Execution on JDK 9+ (CVE-2022-22965) | 337210 , 340087 |
| CVE-2022-46169 | Cacti remote_agent.php Pre-Auth Command Injection (CVE-2022-46169) | 344364 , 344370 |
| CVE-2024-36401 | GeoServer Unauthenticated Remote Code Execution in Evaluating Property Name Expressions (CVE-2024-36401) | 340087 , 340095 , 344370 |
| CVE-2024-28752 | Apache CXF Aegis DataBinding Server-Side Request Forgery (CVE-2024-28752) | 391213 |
| CVE-2024-56511 | DataEase Authentication Bypass via Whitelist Path Traversal (CVE-2024-56511) | 340195 |
| CVE-2026-108804 | TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2017-17405 | Ruby Net::FTP Module Command Injection (CVE-2017-17405) | 393655 |
| CVE-2021-45788 | MeterSphere v1.15.4 Authenticated SQL Injection (CVE-2021-45788) | 340156 , 380026 , 380122 |
| CVE-2026-108963 | databasement Arbitrary Code Execution Vulnerability | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2018-19475 | GhostScript Sandbox Bypass Command Execution (CVE-2018-19475) | 330791 , 340152 |
| CVE-2023-51449 | Gradio File Path Traversal (CVE-2023-51449) | 347009 |
| CVE-2024-45195 | Apache OFBiz Authentication Bypass Leads to RCE (CVE-2024-45195) | 340162 , 340163 |
| CVE-2026-22777 | ComfyUI-Manager CRLF Injection in Configuration Handler (CVE-2026-22777) | 390722 |
| CVE-2019-0193 | Apache Solr Remote Command Execution (CVE-2019-0193) | 337209 , 337210 , 337211 , 340147 , 340148 , 341256 , 342259 , 344363 , 344370 |
| CVE-2026-108902 | pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link | 340007 , 344360 , 390709 |
| CVE-2025-11937 | Stored XSS through a system message in SecurePoll | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-108850 | Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup | 337109 , 337110 , 340165 , 347009 , 390722 , 398021 , 398022 |
| CVE-2018-18778 | ACME mini_httpd Arbitrary File Read (CVE-2018-18778) | 347009 , 390709 |
| CVE-2025-10812 | code-projects Hostel Management System index.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10813 | code-projects Hostel Management System index.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10816 | Jinher OA XML text xml external entity reference | 330791 , 340152 , 344360 , 344370 , 344372 , 344373 , 347009 , 380018 |
| CVE-2025-10817 | Campcodes Online Learning Management System admin_user.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10829 | Campcodes Computer Sales and Inventory System sup_edit1.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10830 | Campcodes Computer Sales and Inventory System inv_edit1.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10832 | SourceCodester Pet Grooming Management Software fetch_product_details.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10833 | 1000projects Bookstore Management System login.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10836 | SourceCodester Pet Grooming Management Software print1.php sql injection | 340145 , 380122 |
| CVE-2025-10843 | Reservation Online Hotel Reservation System paypalpayout.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10973 | JackieDYH Resume-management-system show.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108772 | bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-108799 | jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108805 | krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108806 | krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108807 | krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108719 | LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url | 337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022 |
| CVE-2025-10945 | nuz007 smsboom d.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10946 | nuz007 smsboom dy.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-10825 | Campcodes Online Beauty Parlor Management System view-appointment.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10827 | PHPJabbers Restaurant Menu Maker preview.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2025-10828 | SourceCodester Pet Grooming Management Software edit.php sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2025-10844 | Portabilis i-Educar aluno sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108774 | erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108777 | erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108778 | erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108779 | erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108781 | erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-108787 | houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery | 337109 , 337110 , 344360 , 398021 , 398022 |
| CVE-2026-108791 | westboy CicadasCMS Template Management input TemplateController.input path traversal | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-108811 | WMCMS index.php information disclosure | 344360 , 347009 |
| CVE-2025-10837 | code-projects Simple Food Ordering System order.php cross site scripting | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-108790 | westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal | 340007 , 344360 , 390709 |
| CVE-2026-108802 | y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting | 333140 , 340095 , 342259 |