> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# PoC Released for CVE-2024-22274
- URL: https://darkwebinformer.com/poc-released-for-cve-2024-22274/
- Published: 2024-07-15T17:24:07.000Z
- Updated: 2025-09-04T22:28:35.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities

Privilege Escalation: VMware vCenter Server Authenticated RCE

The “com.vmware.appliance.recovery.backup.job.create” and the “com.vmware.appliance.recovery.backup.validate” API components are vulnerable to a flag injection attack that can be leveraged to execute arbitrary commands as the root user on the target system."

To work with this PoC exploit, you must have valid credentials and log in to the VMware vCenter Server shell via SSH. The user must have the "admin" role, as specified in the vcenter\_creds.txt file.

```Code
$ git clone https://github.com/l0n3m4n/CVE-2024-22274-RCE.git
$ cd CVE-2024-22274-RCE
$ python3 -m venv venv && source venv/bin/activate
$ pip install -r requirements.txt
```

Link: <https://github.com/l0n3m4n/CVE-2024-22274-RCE>