Exploitation Summary
EIP tracks 3 public exploits for CVE-2026-26235. PoCs published by banyamer, XiaomingX, mbanyamer.
AI-analyzed exploit summary This Python script exploits CVE-2026-26235, a missing authentication vulnerability in JUNG Smart Visu Server, allowing unauthenticated reboot or shutdown via direct POST requests to specific CGI endpoints.
Description
JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication.
Exploits (3)
This Python script exploits CVE-2026-26235, a missing authentication vulnerability in JUNG Smart Visu Server, allowing unauthenticated reboot or shutdown via direct POST requests to specific CGI endpoints.
The repository contains a functional Python exploit for CVE-2026-26235, which targets an unauthenticated remote reboot/shutdown vulnerability in JUNG Smart Visu Server <= 1.1.1050. The exploit sends a POST request to exposed CGI endpoints without authentication, demonstrating the vulnerability.
This is a functional PoC exploit for CVE-2026-26235, demonstrating unauthenticated remote reboot/shutdown of JUNG Smart Visu Server via exposed CGI endpoints. The script sends a POST request to either /cgi-bin/reboot.sh or /cgi-bin/shutdown.sh without authentication.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H