CVE-2026-39031

EIP tracks 1 public exploit for CVE-2026-39031. PoCs published by user6400.

AI-analyzed exploit summary This PoC exploits a reversible password encryption scheme in Lansweeper lsrunase/lsencrypt 2.0, where RC4 keys are derived from a cleartext 8-character prefix and a fixed key suffix. The script decrypts or encrypts passwords by reconstructing the key material without brute force.

Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a single SHA-1 hash and RC4 decryption operation, with no brute force required.