Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-103781. PoCs published by Alexander Philiotis.
AI-analyzed exploit summary This Metasploit module exploits Lucee's scheduled job functionality to achieve remote code execution by creating a job that fetches and executes a malicious CFM payload from an attacker-controlled server. It requires authentication and targets Lucee servers with exposed administrative interfaces.
Description
Lucee Scheduled Job v1.0 - Command Execution
Exploits (1)
This Metasploit module exploits Lucee's scheduled job functionality to achieve remote code execution by creating a job that fetches and executes a malicious CFM payload from an attacker-controlled server. It requires authentication and targets Lucee servers with exposed administrative interfaces.