Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.
Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.
CVE-2026-50522 PoC