{"id":533,"date":"2026-04-08T01:19:06","date_gmt":"2026-04-08T01:19:06","guid":{"rendered":"https:\/\/quantusintel.group\/osint\/blog\/2026\/04\/08\/cmspit-cockpit-cms-rce-mongodb-exposure-and-privilege-escalation-via-vulnerable-exiftool\/"},"modified":"2026-04-08T01:19:06","modified_gmt":"2026-04-08T01:19:06","slug":"cmspit-cockpit-cms-rce-mongodb-exposure-and-privilege-escalation-via-vulnerable-exiftool","status":"publish","type":"post","link":"https:\/\/quantusintel.group\/osint\/blog\/2026\/04\/08\/cmspit-cockpit-cms-rce-mongodb-exposure-and-privilege-escalation-via-vulnerable-exiftool\/","title":{"rendered":"[CMSpit] \u2014 Cockpit CMS RCE, MongoDB Exposure and Privilege Escalation via Vulnerable ExifTool"},"content":{"rendered":"<div class=\"medium-feed-item\">\n<p class=\"medium-feed-image\"><a href=\"https:\/\/osintteam.blog\/cmspit-cockpit-cms-rce-mongodb-exposure-and-privilege-escalation-via-vulnerable-exiftool-d4838c44c2a7\"><img data-opt-id=1800888334  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/cdn-images-1.medium.com\/max\/1920\/1*IkIEkDY8mp5cPFjmPxiQ3w.jpeg\" width=\"1920\" \/><\/a><\/p>\n<p class=\"medium-feed-snippet\">Chaining RCE, database misconfiguration, and metadata parsing flaws to achieve full system compromise.<\/p>\n<p class=\"medium-feed-link\"><a href=\"https:\/\/osintteam.blog\/cmspit-cockpit-cms-rce-mongodb-exposure-and-privilege-escalation-via-vulnerable-exiftool-d4838c44c2a7\">Continue reading on OSINT Team \u00bb<\/a><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Chaining RCE, database misconfiguration, and metadata parsing flaws to achieve full system compromise. Continue reading on OSINT Team \u00bb<\/p>\n","protected":false},"author":1,"featured_media":534,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-533","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/posts\/533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/comments?post=533"}],"version-history":[{"count":0,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/posts\/533\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/media\/534"}],"wp:attachment":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/media?parent=533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/categories?post=533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/tags?post=533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}