ExploitPublished
Erugo 0.2.14 · Remote Code Execution (RCE)
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 6 May 2026, 02:38 UTC
What to do
AI-suggested
Until an official fix is available, consider restricting network access to the affected service and monitoring for exploitation attempts. Do not rely on generic mitigations unless specifically recommended by the vendor.
Description
Erugo 0.2.14 - Remote Code Execution (RCE)
Indicators of compromise
Exploit source code
# Exploit Title: Erugo <= 0.2.14 - Authenticated Remote Code Execution (RCE)
# Date: 2026-02-02
# Exploit Author: Abdul Moiz
# Vendor Homepage: https://github.com/ErugoOSS/Erugo
# Software Link: https://hub.docker.com/layers/wardy784/erugo/0.2.14/images/sha256-d3da70b337212a6c774b7028256870274edc2ac40536fcc0f1706cbbc4ed4fbf
# Version: <= 0.2.14
# Tested on: Linux (Docker)
# CVE: CVE-2026-24897
import requests
import json
import sys
import time
import base64
import argparse
import random
import …References
Community reviews
Loading reviews…