CVE-2022-27262

Critical · CVSS 9.8

Skipper — Arbitrary File Upload leading to Remote Code Execution (CWE-434)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: oss containerizable; CWE-434

Description

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.

Search profile — drives PoC discovery

Symbols file upload moduleuploadcrafted filearbitrary code execution

Keywords CVE-2022-27262Skipperarbitrary file uploadfile upload vulnerabilityRCEv0.9.1unrestricted file uploadCWE-434Skipper file upload exploitSkipper PoC

Versions: v0.9.1

Ranked PoCs (5) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Ch35h1r3c47/CVE-2022-44136-poc needs review

recent activity

gh_search · Python

★ 1
bypazs/CVE-2022-32114 needs review

gh_search

★ 1
NketiahGodfred/Guppy-6.0-RCE needs review

recent activity

gh_search · Shell

★ 0
blue0x1/GuppY-exploit-rce needs review

gh_search · PHP

★ 0
cyberexpert111/remote-code-execution-via-web-shell-upload needs review

recent activity

gh_search

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z