CVE-2026-21891 PoC — ZimaOS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21891.yaml

Associated Vulnerability

Title:ZimaOS 安全漏洞 (CVE-2026-21891)
Description:ZimaOS是IceWhaleTech的一个开源的操作系统项目，旨在提供一个轻量级、高性能、安全的操作系统环境。 ZimaOS 1.5.0及之前版本存在安全漏洞，该漏洞源于密码验证不当，可能导致未经授权的访问。

Description

ZimaOS <= 1.5.0 contains a broken authentication caused by improper password validation for known system service accounts in the login function, letting attackers authenticate with any password for these accounts, exploit requires knowledge of common usernames.

File Snapshot


 id: CVE-2026-21891

info:
  name: ZimaOS - Authentication Bypass
  author: DhiyaneshDk
  severity: c

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!