Exploit for CVE-2026-38526

githubexploit · 2026-06-24

Description

An exploit for vulnerability 2026 38526 with no further description.

Entry point

Parameterfile · request body

Path/admin/tinymce/upload

Authenticated unrestricted file upload to TinyMCE endpoint enabling remote code execution

All known vulnerabilities by product

Krayin Crm

CVSS 9.9 for CVE-2026-38526

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

97%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

3.8%higher than 89.1% of all CVEs

Updated 2026-08-13

CVE Information

CVE-2026-38526

Exploit Details

Modified:2026-06-24 22:27

Last Seen:2026-06-24 22:38

Reporter:pawpic

Written in:Python

Last commit:2026-06-26

Other exploits for CVE-2026-38526

Exploit for CVE-2026-38526

2026-07-13 CerberusMrXiGITHUB

Exploit for CVE-2026-38526

2026-07-13 QurclincGITHUB

Exploit for CVE-2026-38526

2026-07-11 ResolvddGITHUB

Exploit for CVE-2026-38526

2026-07-11 ResolvddGITHUB

Krayin CRM v2.2.x - Authenticated Remote Code Execution

2026-07-08 DiamorphineEXPLOITDBPython

Exploit for CVE-2026-38526

2026-07-08 b0nyoGITHUB

Exploit for CVE-2026-38526

2026-07-06 diamorphine666GITHUB

Exploit for CVE-2026-38526

2026-07-06 mmoobbeeiidat-designGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=1D800BD3-189F-5EE9-BFBA-BC99C4EB9527
No description provided

Exploit Code

Share

Share on social media: