ExploitPublished
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
Source Exploit-DB RSS Feed
0
Fixed in 4.2 : patch affected systems as a priority.
Data as of 5 May 2026, 07:48 UTC
Severity
CriticalRated by Threat Radar
- Patch
- Available – fixed in 4.2
What to do
AI-suggested
If you cannot patch yet, restrict access to the vulnerable platform and monitor for suspicious activity. Avoid exposing the platform directly to untrusted networks.
Description
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
Indicators of compromise
Exploit source code
# Exploit Title: GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
# Date: 2026-01-08
# Exploit Author: Ashif Iqubal
# Vendor Homepage: https://www.openeclass.org/
# Software Link: https://download.openeclass.org/files/4.1/
# Version: < 4.2
# Tested on: Debian Ubuntu (Apache/2.4.58, PHP 8.3.6, MySQL 8.0.40-0ubuntu0.24.04.1)
# CVE: CVE-2026-22241
import os
import sys
import zipfile
import requests
import argparse
from bs4 import BeautifulSoup
from argparse import RawTextH…References
Community reviews
Loading reviews…