Atomicorp WAF Research Notes
Research Update - 2026-10-30
Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.
The entries published in this update represent research notes produced during ongoing analysis activities.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
Presence means a positive research finding was published. Absence means no conclusion should be drawn.
CVE Notes Published in This Update
| CVE | Vulnerability Name | Rules Observed |
|---|---|---|
| CVE-2023-31719 | FUXA <= 1.1.12 - Unauthenticated SQL Injection | 340145 , 340156 , 341145 |
| CVE-2026-107092 | NexoPOS v6.2.4 Path Traversal Vulnerability | 340007 , 344360 , 390709 |
| CVE-2026-31158 | CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 Arbitrary Code Execution Vulnerability | 340017 , 341245 , 380122 |
| CVE-2023-53982 | PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter | 340016 , 340017 , 340144 , 340156 , 340157 , 341145 , 360147 , 360148 , 380122 |
| CVE-2026-61707 | SOCFortress CoPilot: Stored case-report template injection permits backend code execution | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-61719 | WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-49142 | OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-61576 | Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key | 340007 , 344360 , 390709 |
| CVE-2026-61654 | Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-114724 | webmail Security Vulnerability | 330708 , 390712 , 390722 |
| CVE-2026-119025 | open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-118758 | Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-97645 | Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting via List Field | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-119122 | Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check | 337109 , 337110 , 344360 , 398021 , 398022 |
| CVE-2026-5461 | Forminator Forms <= 1.55.0.2 - Unauthenticated Limited File Deletion via Draft Upload Metadata | 340007 , 344360 , 390709 |
| CVE-2026-80067 | MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter | 340007 , 344360 , 390709 |
| CVE-2016-20084 | WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS | 340087 , 340095 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-5697 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5698 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5699 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5700 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |