4xura/CVE-2026-44011-craftcms-auth-rce

PoC

The PoC of CVE-2026-44011: Craft CMS RCE with an authenticated user.

view exploit source poc_in_githubauthor 4xurapublished 2026-09-27catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-44011US	—	0.62% (50th)	Exploit	2026-05-12
Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, Craft CMS which contains an input-handling flaw in a Yii object creation path that let any…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.