# Security & Responsible Disclosure

## Intended use

This repository contains a **proof-of-concept** for CVE-2026-57827. It is
intended exclusively for:

- **Security research** and education.
- **Defensive testing** — verifying whether your own infrastructure is exposed.
- **Blue-team / incident-response** validation.

## Authorized use only

Running this tool against any system **you do not own or do not have explicit
written permission to test is illegal and against the purpose of this project.**
You are solely responsible for your actions and for complying with all
applicable laws and regulations.


Please do **not** upload shells or artifacts to public repos — this repo's
default behavior already auto-removes uploaded shells after confirming RCE.

## Related CVE

- **CVE-2026-57827** — RSFiles! (com_rsfiles) unauthenticated file upload → RCE
- Fixed in **RSFiles! 1.17.12**