Linux Page-Cache Privesc CVE-2026-43284/43500 & Dompdf/Supsystic RCE Analysis

Vulnerability Overview 1. Linux Page-Cache Privilege Escalation (CVE-2026-43284 & CVE-2026-43500) - Description: These two vulnerabilities are page cache vulnerabilities in the Linux kernel, identified as CVE-2026-43284 and CVE-2026-43500, respectively. They can be exploited independently, and new Metasploit modules have been released for both. - Impact: Attackers can leverage these vulnerabilities to escalate privileges. 2. Citrix ADC (NetScaler) CVE-2026-3055 Scanner - Description: This is an auxiliary module designed to scan for information disclosure vulnerabilities (CVE-2026-3055) in Citrix NetScaler. When NetScaler is configured as a SAML IdP, it may leak memory and expose session cookies. - Impact: Potential disclosure of sensitive information. 3. Ollama Scanner - Description: This is an auxiliary module used to enumerate installed LLMs (Large Language Models) and retrieve their detailed information. - Impact: Primarily used for information gathering. 4. Dompdf RCE via Malicious Font Caching (CVE-2022-28368) - Description: This is a new exploit module targeting a remote code execution vulnerability (CVE-2022-28368) in Dompdf versions prior to 1.2.1. When remote resource loading is enabled, Dompdf caches fonts fetched via CSS rules. Attackers can exploit this to place a PHP webshell in the font cache directory and trigger execution. - Impact: Remote code execution. 5. Supsystic Contact Form WordPress Plugin SSTI RCE (CVE-2026-4257) - Description: This is a new exploit module targeting a server-side template injection (SSTI) vulnerability (CVE-2026-4257) in the Supsystic Contact Form plugin. This vulnerability allows for remote code execution. - Impact: Remote code execution. Scope of Impact Linux Page-Cache Privilege Escalation: Affects all systems running relevant versions of the Linux kernel. Citrix ADC (NetScaler) CVE-2026-3055: Affects Citrix NetScaler systems configured as SAML IdPs. Ollama Scanner: Affects systems with LLMs installed. Dompdf RCE via Malicious Font Caching: Affects systems using Dompdf versions prior to 1.2.1. Supsystic Contact Form WordPress Plugin SSTI RCE: Affects WordPress sites using versions 1.7.36 and earlier of the Supsystic Contact Form plugin. Remediation Linux Page-Cache Privilege Escalation: Update the Linux kernel to the latest version. Citrix ADC (NetScaler) CVE-2026-3055: Update Citrix NetScaler to the latest version or disable the SAML IdP configuration. Ollama Scanner: No direct remediation required; this module is primarily for information gathering. Dompdf RCE via Malicious Font Caching: Update Dompdf to version 1.2.1 or later, or disable the remote resource loading feature. Supsystic Contact Form WordPress Plugin SSTI RCE: Update the Supsystic Contact Form plugin to the latest version or disable the plugin. POC Code or Exploit Code No specific POC code or exploit code is provided on this page.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Page-Cache Privesc CVE-2026-43284/43500 & Dompdf/Supsystic RCE Analysis