joshuavanderpoll/cve-2025-66398

PoC

CVE-2025-66398 — Signal K Server ≤ 2.18.0 RCE PoC

view exploit source poc_in_githubauthor joshuavanderpollpublished 2026-03-10catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-66398UShigh8.8Exploit
Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan