CyberCTF/vulhub-jenkins-cve-2018-1000861

PoC

Vulhub jenkins/CVE-2018-1000861: Jenkins Stapler unauthenticated RCE, run with Isoloom

view exploit source poc_in_githubauthor CyberCTFpublished 2026-10-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-1000861US	critical9.8OT critical	98.3% (100th)	KEV	2018-12-10
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/Meta…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.