Home › CVE Intelligence › CVE-2026-16015
CVSS 6.3 MEDIUM 🔴 ACTIVELY EXPLOITED Vulnerability

CVE-2026-16015: CVE-2026-16015 - poco-ai poco-claw executor_manager API tasks.py create_task missing auth…

CVE ID : CVE-2026-16015 Published : July 17, 2026, 1:15 p.m. | 14minutes ago Description : A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of the file…

6.3CVSS Score
MEDIUMSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-16015
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score6.3 (MEDIUM)
Actively Exploited✅ Yes
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE ID : CVE-2026-16015

Published : July 17, 2026, 1:15 p.m. | 14minutes ago

Description : A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of the file executor_manager/app/api/v1/tasks.py of the component executor_manager API. Executing a manipulation can lead to missing authentication. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.5.7 is able to resolve this issue. This pat

🎯 Known Indicators of Compromise

{"type":"indicator","value":"CVE-2026-16015","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1}
⚡ DETECTION RULES AVAILABLE

Get CVE-2026-16015 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence