CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 تنفيذ أوامر عن بُعد RCE مُصادَق عليه في Windows Admin Center عبر WinREST/PowerShell invokeCommand. الاستخدام: python3 wacrce.py "" WACPASS= python3 wacrce.py متغيرات البيئة: WACBASE - override target base URL default below WACPASS - password, used if not...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 تنفيذ تعليمات برمجية عن بُعد RCE موثّق في Windows Admin Center عبر WinREST/PowerShell invokeCommand. الاستخدام: python3 wacrce.py "" WACPASS= python3 wacrce.py المتغيرات البيئية: WACBASE - override target base URL default below WACPASS - password, used if n...

WinREST Remote Privilege Escalation

So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...