Sploitus

Exploit for cve-2026-poc-collection

CVE-2026-21509CVE-2026-21858CVE-2026-23918CVE-2026-2991CVE-2026-31431CVE-2026-31802CVE-2026-41940

githubexploit Β· 2026-08-06

Exploit Code

README293 lines
## https://sploitus.com/exploit?id=8621F4E6-19EA-5FA2-9C4E-6FCFE544B313
# CVE-2026 Proof-of-Concept (PoC) Collection Report

**Collection Date**: May 19, 2026
**Collection Tools**: Automated scripts + proxy access
**Proxy**: [Hidden]

## Collection Statistics

- **Total Number of PoCs**: 12
- **Breakdown by Category**:
- Web Application Vulnerabilities: 3
- Linux Kernel Vulnerabilities: 3
- Windows Vulnerabilities: 1
- Other Vulnerabilities: 5

## Detailed PoC List

### 1. Web Application Vulnerabilities

#### CVE-2026-21858 (CVSS 10.0)
- **Description**: n8n Ni8mare - Unauthorized arbitrary file read leading to an RCE chain
- **Language**: Python
- **Stars**: 257
- **URL**: https://github.com/Chocapikk/CVE-2026-21858
- **Severity**: Critical
- **Impact**: Remote Code Execution

#### CVE-2026-23918-Apache-H2-PoC
- **Description**: PoC for a double-free vulnerability in Apache mod_http2, supporting multi-mode DoS and passive RCE detection
- **Language**: Python
- **Stars**: 15
- **URL**: https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC
- **Severity**: High
- **Impact**: Denial of Service, Remote Code Execution

#### CVE-2026-31431-Copy-Fail
- **Description**: Research materials, PoC scripts, and test assets for a Linux local privilege escalation vulnerability
- **Language**: C
- **Stars**: 5
- **URL**: https://github.com/4xura/CVE-2026-31431-Copy-Fail
- **Severity**: High
- **Impact**: Local privilege escalation

### 2. Linux Kernel Vulnerabilities

#### cve_2026_31431
- **Description**: CVE-2026-31431 exploit PoC
- **Language**: Python
- **Stars**: 558
- **URL**: https://github.com/rootsecdev/cve_2026_31431
- **Severity**: High
- **Impact**: Local privilege escalation

#### CVE-2026-31431-Linux-Copy-Fail
- **Description**: A CVE-2026-31431 exploit implemented in Rust that achieves local privilege escalation via arbitrary page cache write primitives
- **Language**: Rust
- **Stars**: 2
- **URL**: https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail
- **Severity**: High
- **Impact**: Local privilege escalation

#### Copy-Fail-CVE-2026-31431-Kubernetes-PoC
- **Description**: Kubernetes container escape PoC that achieves node-level code execution via the CVE-2026-31431 page cache corruption
- **Language**: YAML
- **Stars**: 138
- **URL**: https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC
- **Severity**: Critical
- **Impact**: Container escape, node-level code execution

### 3. Windows Vulnerabilities

#### CVE-2026-21509-PoC
- **Description**: Educational PoC for a Microsoft Office security feature bypass vulnerability; generates a harmless DOCX file to study EDR/AV visibility
- **Language**: Python
- **Stars**: 17
- **URL**: https://github.com/gavz/CVE-2026-21509-PoC
- **Severity**: Medium
- **Impact**: Security feature bypass

### 4. Other Vulnerabilities

#### CVE-2026-41940-Exploit-PoC
- **Description**: PoC tool for cPanel and WHM authentication bypass vulnerability, written in Go
- **Language**: Go
- **Stars**: 0
- **URL**: https://github.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC
- **Severity**: High
- **Impact**: Authentication bypass

#### CVE-2026-31802
- **Description**: PoC for an npm tar package path traversal vulnerability; achieves arbitrary file overwrite via symbolic link extraction
- **Language**: JavaScript
- **Stars**: 0
- **URL**: https://github.com/Recorded-texteditor120/CVE-2026-31802
- **Severity**: High
- **Impact**: Arbitrary file overwrite

#### CVE-2026-2991
- **Description**: Proof-of-Concept (PoC) for an authentication bypass vulnerability in the patient social login REST endpoint of KiviCare versions 4.1.2 and earlier
- **Language**: PHP
- **Stars**: 0
- **URL**: https://github.com/Jumpthereness578/CVE-2026-2991
- **Severity**: Medium
- **Impact**: Authentication bypass

#### CVE-2026-26128
- **Description**: PoC for exploiting CVE-2026-26128
- **Language**: Python
- **Stars**: 22
- **URL**: https://github.com/jarnovandenbrink/CVE-2026-26128
- **Severity**: High
- **Impact**: To be analyzed

#### copyfail-rs
- **Description**: Uses a static binary to detect and exploit the CVE-2026-31431 vulnerability, monitor system integrity, and bypass PAM authentication
- **Language**: Rust
- **Stars**: 0
- **URL**: https://github.com/Liverwortenuresis371/copyfail-rs
- **Severity**: High
- **Impact**: Authentication bypass, privilege escalation

## Vulnerability Classification Guide

### Classification by Vulnerability Type

1. **Privilege Escalation Vulnerabilities** (4)
- cve_2026_31431 (Linux kernel)
- CVE-2026-31431-Linux-Copy-Fail (Linux kernel)
- Copy-Fail-CVE-2026-31431 -Kubernetes-PoC (Container Escape)
- copyfail-rs (Security Tool)

2. **Remote Code Execution Vulnerabilities** (2)
- CVE-2026-21858 (n8n)
- CVE-2026-23918-Apache-H2-PoC (Apache)

3. **Authentication Bypass Vulnerabilities** (3)
- CVE-2026-41940 (cPanel/WHM)
- CVE-2026-2991 (KiviCare)
- copyfail-rs (PAM bypass)

4. **Path Traversal Vulnerabilities** (2)
- CVE-2026-31802 (npm tar)
- CVE-2026-31431-Copy-Fail (research material)

5. **Security Feature Bypass Vulnerabilities** (1)
- CVE-2026-21509 (Microsoft Office)

### Categorized by Programming Language

1. **Python**: 6 PoCs
2. **Rust**: 2 PoCs
3. **Go**: 1 PoC
4. **JavaScript**: 1 PoC
5. **PHP**: 1 PoC
6. **C**: 1 PoC
7. **YAML**: 1 PoC

### Categorized by Severity

1. **Critical (CVSS 9.0–10.0)**: 2
- CVE-2026-21858 (CVSS 10.0)
- Copy-Fail-CVE-2026-31431-Kubernetes-PoC

2. **High (CVSS 7.0–8.9)**: 8
- cve_2026_31431
- CVE-2026-31431-Linux-Copy-Fail
- CVE-2026-31431-Copy-Fail
- CVE-2026-41940-Exploit-PoC
- CVE-2026-31802
- CVE-2026-26128
- copyfail-rs
- CVE-2026-23918-Apache-H2-PoC

3. **Moderate (CVSS 4.0–6.9)**: 2
- CVE-2026-21509-PoC
- CVE-2026-2991

## Usage Instructions

### System Requirements
- Git
- Compiler/interpreter for the corresponding programming language
- Proxy access (hidden)

### Security Warning
⚠️ **These PoCs are intended solely for security research and authorized testing purposes**

1. Unauthorized use of these exploit tools is illegal
2. Use in a test environment only; do not test on production systems
3. Comply with local laws, regulations, and ethical guidelines

### Usage Steps

1. **Clone the repository**:
```bash
git clone https://github.com/η”¨ζˆ·ε/仓库名.git
```

2. **View the documentation**:
```bash
cd repository_name
cat README.md
```

3. **Compile/Run**:
Compile and run according to the repository instructions

## Important Vulnerability Details

### CVE-2026-21858 (n8n RCE Chain)
- **CVSS Score**: 10.0 (Critical)
- **Scope of Impact**: n8n workflow automation platform
- **Exploit Vector**: Unauthorized arbitrary file read β†’ Remote Code Execution
- **Exploitation Conditions**: No authentication required
- **Recommended Action**: Upgrade to the latest version immediately

### CVE-2026-31431 (Linux Kernel Privilege Escalation)
- **CVSS Score**: 7.8 (High)
- **Scope**: Linux kernel
- **Exploit Vector**: Page cache corruption β†’ Local privilege escalation
- **Exploitation Conditions**: Local access
- **Mitigation**: Update the kernel version

### CVE-2026-41940 (cPanel Authentication Bypass)
- **CVSS Score**: 8.1 (High)
- **Scope**: cPanel/WHM
- **Exploit Vector**: Authentication Bypass
- **Exploitation Conditions**: Network Access
- **Recommended Fix**: Update cPanel version

## Recommendations for Future Improvements

1. **Expand Search Scope**:
- Add support for searching by additional CVE numbers
- Search other code hosting platforms (GitLab, Bitbucket)
- Monitor security bulletins and vulnerability databases

2. **Automated Updates**:
- Set up scheduled tasks to automatically collect new PoCs
- Monitor GitHub security announcements
- Automatically verify PoC availability

3. **Categorization Optimization**:
- Categorize by CVSS score
- Categorize by affected software
- Categorize by vulnerability impact
- Categorize by attack vector

4. **Validation Mechanisms**:
- Automatically verify PoC usability
- Check PoC security
- Generate exploit reports

## Directory Structure

```
2026/
β”œβ”€β”€ web/ # Web application vulnerability PoCs
β”‚   β”œβ”€β”€ CVE-2026-21858/
β”‚   β”œβ”€β”€ CVE-2026-31431-Copy-Fail/
β”‚   └── CVE-2026-23918-Apache-H2-PoC/
β”œβ”€β”€ linux/ # Linux kernel vulnerability PoCs
β”‚   β”œβ”€β”€ cve_2026_31431/
β”‚   β”œβ”€β”€ CVE-2026-31431-Linux-Copy-Fail/
β”‚   └── Copy-Fail-CVE-2026-31431-Kubernetes-PoC/
β”œβ”€β”€ windows/ # Windows vulnerability PoCs
β”‚   └── CVE-2026-21509-PoC/
β”œβ”€β”€ network/ # Network device vulnerability PoCs (to be collected)
β”œβ”€β”€ other/ # Other vulnerability PoCs
β”‚   β”œβ”€β”€ CVE-2026-41940-Exploit-PoC/
β”‚   β”œβ”€β”€ CVE-2026-31802/
β”‚   β”œβ”€β”€ CVE-2026-2991/
β”‚   β”œβ”€β”€ CVE-2026-26128/
β”‚   └── copyfail-rs/
β”œβ”€β”€ logs/ # Log files
β”‚   β”œβ”€β”€ github_search.json
β”‚   └── repo_list.txt
β”œβ”€β”€ search_poc.py # Python search script
β”œβ”€β”€ collect_poc.sh # Original collection script
β”œβ”€β”€ collect_poc_v2.sh # Optimized collection script
└── README.md # This report
```

## Contact Information

If you have any questions or suggestions, please contact us via the following methods:
- Create a GitHub Issue
- Send an email to the security team

---

**Disclaimer**: This tool is intended solely for legitimate security research and authorized testing. Users must comply with all applicable laws and regulations and are responsible for their own actions.