CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 RCE autenticado en Windows Admin Center mediante WinREST/PowerShell invokeCommand. Uso: python3 wacrce.py "" WACPASS= python3 wacrce.py Entorno: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center RCE autenticado mediante WinREST/PowerShell invokeCommand. Uso: python3 wacrce.py "" WACPASS= python3 wacrce.py Variables de entorno: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...

WinREST Remote Privilege Escalation

So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...