EIP-2026-104475
PRE-CVEVerax NMS - Multiple Method Authentication Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104475. PoCs published by Andrew Brooks.
AI-analyzed exploit summary This Python script exploits an information disclosure vulnerability in Verax NMS by leveraging AMF deserialization to retrieve all user data via the 'userService.getAllUsers()' method. It uses the PyAMF library to interact with the AMF endpoint, demonstrating unauthorized access to sensitive information.
Description
Verax NMS - Multiple Method Authentication Bypass
Exploits (1)
This Python script exploits an information disclosure vulnerability in Verax NMS by leveraging AMF deserialization to retrieve all user data via the 'userService.getAllUsers()' method. It uses the PyAMF library to interact with the AMF endpoint, demonstrating unauthorized access to sensitive information.