EIP-2026-104514

PRE-CVE

Zenoss 3.2.1 - (Authenticated) Remote Command Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104514. PoCs published by Brendan Coles.

AI-analyzed exploit summary This exploit demonstrates a post-authentication remote command execution vulnerability in Zenoss <= 3.2.1. It authenticates with provided credentials, adds a malicious command to the Zenoss event manager, triggers the command to execute a reverse shell, and cleans up by removing the command and trigger.

Description

Zenoss 3.2.1 - (Authenticated) Remote Command Execution

Exploits (1)

exploitdb WORKING POC VERIFIED
by Brendan Coles · pythonwebappsmultiple
https://www.exploit-db.com/exploits/37570

This exploit demonstrates a post-authentication remote command execution vulnerability in Zenoss <= 3.2.1. It authenticates with provided credentials, adds a malicious command to the Zenoss event manager, triggers the command to execute a reverse shell, and cleans up by removing the command and trigger.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Zenoss <= 3.2.1
Auth required
Prerequisites: Valid credentials for a user with 'ZenManager' or 'Manager' roles · Network access to the target Zenoss instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026