CVE-2026-38945

HIGH

Raynet rvia 12.6.4392.49-amd64.deb - OS Command Injection via Java Search Path

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-38945. PoCs published by Wise-Security.

AI-analyzed exploit summary The repository contains a functional exploit for CVE-2026-38945, which leverages a path traversal vulnerability in RayVentory Scan Engine's Java detection mechanism. The exploit creates a malicious 'java' script in a world-writable directory, which gets executed with elevated privileges when the vulnerable 'oracle' option is triggered.

Description

Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated search criteria of rvia's Java search using the find command.

Exploits (1)

nomisec WORKING POC

by Wise-Security · poc

https://github.com/Wise-Security/CVE-2026-38945

View Code ZIP pw:eip

The repository contains a functional exploit for CVE-2026-38945, which leverages a path traversal vulnerability in RayVentory Scan Engine's Java detection mechanism. The exploit creates a malicious 'java' script in a world-writable directory, which gets executed with elevated privileges when the vulnerable 'oracle' option is triggered.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: RayVentory Scan Engine 12.6 Update 8 and previous versions

No auth needed

Prerequisites: Access to a system with vulnerable RayVentory Scan Engine installed · Sudo permissions to run the 'oracle' option or a cron job that triggers it

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548 - Abuse Elevation Control Mechanism

mistral-large-3 · analyzed Jul 02, 2026 Full analysis →