kipkorirchirchir800-hash/Cve-2026-55944

PoC

This PoC simulates an XML parsing vulnerability where configuration data is parsed and passed directly to ProcessStartInfo. It extracts executable paths and arguments from XML markup to spawn a system process, demonstrating how unsafe input handling can lead to arbitrary command execution.

view exploit source poc_in_githubauthor kipkorirchirchir800-hashpublished 2026-10-27catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-55944US—Exploit
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan