CVE-2026-3854-PoC

CVE-2026-3854 PoC — X-Stat 푸시 옵션 주입을 통한 GitHub RCE 교육 및 인가된 보안 연구 목적으로만 사용하십시오. 명시적인 서면 허가 없이 어떤 시스템에도 사용하지 마십시오. 개요 CVE-2026-3854 는 GitHub Enterprise Server및 GitHub.com의 git push 파이프라인에서 발생하는 원격 코드 실행RCE 취약점입니다. 클라이언트가 푸시 옵션git push -o을 제공하면 GitHub의 내부 Ruby 코드는 각 옵션 값을 세미콜론으로 연결하여 X-Stat 헤더를...

ghe-push-option-rce-scanner

CVE-2026-3854 — RCE su GitHub Enterprise Server tramite Push Option Injection Panoramica Neutralizzazione impropria dei valori delle opzioni push in GHE. Un attaccante con accesso push ottiene RCE sull'istanza. Campo| Valore ---|--- CVE| CVE-2026-3854 Gravità| CRITICA Prodotto| GitHub Enterprise...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 - GitHub Enterprise Server that allowed an Remot...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 — GitHub Enterprise Server RCE via Push Option I...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injectio...

CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...