EIP-2026-100969
PRE-CVEm0n0wall 1.33 - Multiple Cross-Site Request Forgery Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100969. PoCs published by Yann CAM.
AI-analyzed exploit summary This exploit demonstrates multiple CSRF vulnerabilities in m0n0wall 1.33, allowing remote command execution and reverse shell establishment via PHP file creation and execution. It leverages unsanitized input in exec.php, diag_ping.php, and exec_ram.php to achieve root access.
Description
m0n0wall 1.33 - Multiple Cross-Site Request Forgery Vulnerabilities
Exploits (1)
This exploit demonstrates multiple CSRF vulnerabilities in m0n0wall 1.33, allowing remote command execution and reverse shell establishment via PHP file creation and execution. It leverages unsanitized input in exec.php, diag_ping.php, and exec_ram.php to achieve root access.