CVE-2026-26335
CRITICALCalero VeraSMART <2022 R1 - Remote Code Execution
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2026-26335. PoCs published by banyamer, XiaomingX, mbanyamer.
AI-analyzed exploit summary This Python script demonstrates a path traversal vulnerability in Repetier-Server <=1.4.10, allowing unauthorized file reads via crafted URLs with encoded traversal sequences. It includes multiple payload variants and configurable depth for bypassing path restrictions.
Description
Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program Files (x86)\\Veramark\\VeraSMART\\WebRoot\\web.config. An attacker who obtains these keys can craft a valid ASP.NET ViewState payload that passes integrity validation and is accepted by the application, resulting in server-side deserialization and remote code execution in the context of the IIS application.
Exploits (3)
This Python script demonstrates a path traversal vulnerability in Repetier-Server <=1.4.10, allowing unauthorized file reads via crafted URLs with encoded traversal sequences. It includes multiple payload variants and configurable depth for bypassing path restrictions.
This repository contains a functional Python exploit for CVE-2026-26335, targeting Calero VeraSMART < 2022 R1. The exploit leverages hardcoded ASP.NET MachineKey values to forge a malicious ViewState payload, achieving remote code execution via deserialization.
This is a functional exploit for CVE-2026-26335, targeting Calero VeraSMART < 2022 R1. It leverages hardcoded ASP.NET MachineKey values to forge a malicious ViewState payload using ysoserial.net, achieving remote code execution via deserialization.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H