TheMalwareGuardian/CVE-2026-33439

PoC

First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).

view exploit source poc_in_githubauthor TheMalwareGuardianpublished 2026-04-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-33439US	critical9.8	9.33% (95th)	Exploit	2026-04-07
Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution (RCE) via u…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.