sohel160/Webfig-jsproxy-unauthenticated-file-read-CVE-2026-67281-

PoC

sohel160/Webfig-jsproxy-unauthenticated-file-read-CVE-2026-67281-

view exploit source poc_in_githubauthor sohel160published 2026-10-14catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-67281UShigh7.5Exploit
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for fi…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan