Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-44402 — Exploit for CVE-2026-44402 targeting Voltronic Power SNMP Web Pro 1.1, enabling unauthenticated remote code execution via malicious firmware upload. Supports single-target and mass scanning with interactive shell. | Kitploit
Tools/GitHubGitHub/0xcyp1337/cve-2026-44402
Vulnerability ScannersExploitationWeb Application ExploitationPenetration TestingRed TeamingRemote Access Tool
GitHub0xcyp1337/cve-2026-44402

CVE-2026-44402

Exploit for CVE-2026-44402 targeting Voltronic Power SNMP Web Pro 1.1, enabling unauthenticated remote code execution via malicious firmware upload. Supports single-target and mass scanning with interactive shell.

View Repository
10h 43m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE

Python 3.6+ CVSS Author

Critical Unauthenticated Remote Code Execution (CVSS 9.8) — Voltronic Power SNMP Web Pro 1.1

This tool exploits CVE-2026-44402, a vulnerability in the Voltronic Power SNMP Web Pro 1.1 device that allows unauthenticated attackers to upload a malicious firmware archive and execute system commands as root via the upload.cgi endpoint.

⚠️ Vulnerability Overview

PropertyValue
CVE IDCVE-2026-44402
CVSS Score9.8 (Critical)
CWECWE-434 — Unrestricted Upload of File with Dangerous Type
Affected ProductVoltronic Power SNMP Web Pro 1.1
Auth RequiredTIDAK (unauthenticated)
Attack VectorNetwork-based (remote)
PrivilegeRoot-level RCE

Technical Details

The vulnerability exists in the firmware update functionality (upload.cgi). The endpoint:

  1. Does not require authentication
  2. Does not validate uploaded files
  3. Extracts and executes archive contents as root

Exploit Chain

  1. Create Malicious Archive

    • upgrade/install.sh — installation script
    • upgrade/pwned.cgi — web shell

  2. Upload Archive → POST /cgi-bin/upload.cgi?name=upgrade&?params=upload

    • Response: "ACK" if successful

  3. Extract Archive → GET /cgi-bin/upload.cgi?name=upgrade&?params=extract

    • Response: "ACK" if successful

  4. Install → GET /cgi-bin/upload.cgi?name=upgrade&?params=install

    • install.sh is executed as root
    • Response: "ACK" if successful

  5. Web Shell Active → POST /cgi-bin/pwned.cgi

    • Execute command with cmd parameter → RCE! 🚀

🚀 Features

  • ✅ Single-target exploitation (-u)
  • ✅ Mass scanning & exploitation (-f targets.txt)
  • ✅ Multi-threading (-t 20) — fast parallel processing
  • ✅ Interactive Kali-style shell (--shell) with cd support
  • ✅ Colorful output with animated banner
  • ✅ Real-time progress bar with spinner
  • ✅ JSON/TXT export — url | output format
  • ✅ Proxy support (--proxy)
  • ✅ Configurable timeout (--timeout)
  • ✅ Verbose mode (-v) for debugging
  • ✅ No external dependencies beyond requests and prompt_toolkit

📥 Installation

root@kitploit:~
# Clone the repository
git clone https://github.com/0xCyp1337/CVE-2026-44402.git
cd CVE-2026-44402
python3 CVE-2026-44402.py
Download Tool