cve-2025-66398

CVE-2025-66398 — Signal K Server RCE PoC 📜 설명 CVE-2025-66398은 Signal K Server의 문제로, 인증되지 않은 공격자가 /skServer/validateBackup을 통해 서버의 복원 상태를 오염시키고, /skServer/restore를 통해 설정을 가로채서 백도어 관리자 계정을 주입한 후, 보안 전략을 공격자가 제어하는 Node.js 모듈로 전환하여 RCE를 달성할 수 있습니다. 영향받는 버전: Signal K Server ≤ 2.18.0 영향 개괄: 인증되지 않은 상태 ...

PT-2026-6492

Summary An unauthenticated attacker can pollute the internal state restoreFilePath of the server via the /skServer/validateBackup endpoint. This allows the attacker to hijack the administrator's "Restore" functionality to overwrite critical server configuration files e.g., security.json,...

CVE-2025-66398

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state restoreFilePath of the server via the /skServer/validateBackup endpoint. This allows the attacker to hijack the administrator's "Restor...

CVE-2025-66398: Improper Neutralization of Special Elements used in an OS Command

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state restoreFilePath of the server via the /skServer/validateBackup endpoint. This allows the attacker to hijack the administrator's "Restor...