Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-118235. PoCs published by Daniele Linguaglossa.
AI-analyzed exploit summary This exploit leverages two vulnerabilities in Acunetix WVS 10: a remote command execution flaw via unsafe ActiveX object usage (WScript.shell) and a local privilege escalation due to insecure directory permissions. The PoC delivers a meterpreter shell by exploiting the scheduler service and replacing scripts in an insecure directory.
Description
Acunetix WVS 10 - Remote Command Execution
Exploits (1)
This exploit leverages two vulnerabilities in Acunetix WVS 10: a remote command execution flaw via unsafe ActiveX object usage (WScript.shell) and a local privilege escalation due to insecure directory permissions. The PoC delivers a meterpreter shell by exploiting the scheduler service and replacing scripts in an insecure directory.