Exploit for CVE-2022-26134

kitploit · 2026-08-26

Description

PoC for CVE-2022-26134 executing arbitrary commands remotely against a target URL.

Affected software

Atlassian Confluence Data Center< 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.0

Atlassian Confluence Server< 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.0

All known vulnerabilities by product

CVSS 9.8 for CVE-2022-26134

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-26 07:35

Last Seen:2026-08-26 08:09

Reporter:KitPloit

Tags

Apache HTTP ServerRemote Code ExecutionProof of ConceptCommand ExecutionCVE-2022-26134

Other exploits for CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

exploit_CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

-CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-COSKPER-PAPA-CVE-2022-26134
pip3 install -r requirements.txt

uso: python3 exp.py url "cmd"

exemplo: python3 exp.py http://192.168.1.1/ whoami