Exploit for CVE-2022-26133

kitploit · 2026-08-25

Description

Unauthenticated deserialization in Bitbucket Data Center SharedSecretClusterAuthenticator for RCE.

Affected Atlassian Bitbucket Data Center versions

Atlassian Bitbucket Data Center< 7.6.14, 7.17.6, 7.18.4, 7.19.4, 7.20.0

All known vulnerabilities by product

CVSS 9.8 for CVE-2022-26133

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

References

https://github.com/0xAbbarhSF/CVE-2022-26133

Exploit Details

Modified:2026-08-25 04:56

Last Seen:2026-08-26 02:09

Reporter:KitPloit

Tags

Bitbucket Data CenterJava deserializationSharedSecretClusterAuthenticatorUnauthenticatedRemote code executionAtlassian

Other exploits for CVE-2022-26133

2026-08-28 KitPloitKITPLOIT

Exploit for Deserialization of Untrusted Data in Atlassian Bitbucket_Data_Center

2022-06-04 0xStarFordGITHUB

Exploit for Deserialization of Untrusted Data in Atlassian Bitbucket_Data_Center

2022-06-04 0xAbbarhSFGITHUB

Exploit for Deserialization of Untrusted Data in Atlassian Bitbucket_Data_Center

2022-05-09 Pear1yGITHUB

Exploit for Deserialization of Untrusted Data in Hazelcast

2021-10-05 snowyyowlGITHUB

Exploit Code

MARKDOWN26 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ABBARHISSARH-CVE-2022-26133
# CVE-2022-26133

![](https://raw.githubusercontent.com/0xAbbarhSF/CVE-2022-26133/main/download.jpeg)

## 정보

#### 설명

Atlassian Bitbucket Data Center 버전 5.14.0 이상, 7.6.14 이전, 7.7.0 이상 7.17.6 이전, 7.18.0 이상 7.18.4 이전, 7.19.0 이상 7.19.4 이전, 7.20.0에서 SharedSecretClusterAuthenticator는 원격의 인증되지 않은 공격자가 Java 역직렬화를 통해 임의 코드를 실행할 수 있도록 허용합니다.

#### 상태 -> PUBLIC

#### 문제 유형 ->신뢰할 수 없는 데이터의 역직렬화

# 설치 및 실행

  * git clone https://github.com/0xAbbarhSF/CVE-2022-26133
  * cd CVE-2022-26133
  * chmod +x *
  * pip2 install parse
  * python2 exploit.py



# 연락처: - 🕊️ Twitter: @0xAbbarhSF