Skip to main content
ExploitPublished

SUSE Manager 4.3.15 · Code Execution

Source Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 6 May 2026, 02:38 UTC

What to do

AI-suggested

Until an official fix is released, restrict access to SUSE Manager 4.3.15 instances and monitor for suspicious activity related to code execution attempts.

Description

SUSE Manager 4.3.15 - Code Execution

Indicators of compromise

Exploit source code

Exploit code for SUSE Manager 4.3.15 - Code Execution7,160 characters
# Exploit Title: SUSE Manager 4.3.15 - Code Execution
# Date: 29.01.2026
# Exploit Author: Wiktor Maj
# Vendor Homepage: https://www.uyuni-project.org/
# Software Link: https://github.com/uyuni-project/uyuni
# Version: Uyuni 2025.05, SUSE Manager 5.0.4, SUSE Manager 4.3.15
# Tested on: Debian 12 (bookworm), Python 3.11.2 with websocket-client 1.9.0
# CVE: CVE-2025-46811

# Sends a reverse shell payload to the vulnerable WebSocket of either SUSE Manager or Uyuni.
# Set up a listener session in a …

References

Community reviews

Loading reviews…