CVE-2026-39987

The repository contains a mass scanner for CVE-2026-39987, targeting Marimo's unauthenticated WebSocket RCE vulnerability. It includes detection logic for various environments (e.g., cPanel, Plesk, Apache) but does not contain functional exploit code for achieving RCE.

This repository contains a Python script that detects Marimo notebook instances vulnerable to CVE-2026-39987 by checking for exposed WebSocket endpoints and version information. It does not include exploit code but performs safe detection checks.

This repository contains a functional exploit for CVE-2026-39987, targeting a WebSocket-based authentication bypass vulnerability in Marimo software. The exploit establishes a WebSocket connection to a vulnerable endpoint and provides an interactive shell, demonstrating remote code execution (RCE) capabilities.

This repository contains a functional Python-based exploit for CVE-2026-39987, targeting Marimo versions below 0.23.0 via an unauthenticated WebSocket RCE vulnerability. The PoC includes both single-command execution and interactive shell modes, along with version detection logic.

The repository contains a Python-based scanner that detects vulnerable versions of Marimo by checking the version endpoint and favicon. It does not exploit the vulnerability but confirms the presence of vulnerable versions.