TamatahYT/CVE-2026-53576

PoC

Kestra Unauthenticated RCE Exploit (CVE-2026-53576)

view exploit source poc_in_githubauthor TamatahYTpublished 2026-08-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-53576US	—OT elevated	3.30% (88th)	Exploit	2026-06-26
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request who…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.