Exploit for CVE-2026-64638

githubexploit · 2026-08-12

Description

CVE-2026-64638 is a Node.js RCE vulnerability exploitable via evil_ngrok.js script.

CVSS 8.9 for CVE-2026-64638

8.9

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:ACTIVE

Working code

65%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

0.9%higher than 56.3% of all CVEs

Updated 2026-08-14

CVE Information

CVE-2026-64638

Exploit Details

Modified:2026-08-12 12:01

Last Seen:2026-08-12 12:08

Reporter:ZildanZ

Written in:JavaScript

Last commit:2026-08-12

Other exploits for CVE-2026-64638

Exploit for CVE-2026-12345

2026-08-14 zahidec0deGITHUB

xss2shell-pro

2026-08-13 hackersatyamrastogiGITHUB

xss2shell

2026-08-10 goatshelGITHUB

📄 WordPress 7.0.2 Code Execution / Cross Site Scripting

2026-08-10 1dayexploitPACKETSTORMPython

Exploit for CVE-2026-64638

2026-08-09 jendmaoulGITHUB

Exploit for CVE-2026-64638

2026-08-09 Ahmall-secGITHUB

Exploit for CVE-2026-64638

2026-08-09 eh-amishGITHUB

Exploit for CVE-2026-64638

2026-08-09 0xliponGITHUB

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=0A842608-F7FA-5DBF-AA5D-9E63BEE79521
## Requirement
Node .js
## Command
node evil_ngrok.js

Exploit Code

Share

Share on social media: