Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100013. PoCs published by J.A. Gutierrez.
AI-analyzed exploit summary The exploit leverages a command injection vulnerability in the pfdispaly.cgi CGI program on IRIX systems. By appending a newline and arbitrary command to the query string, an attacker can execute system commands, such as spawning an xterm to a remote display.
Description
IRIX 6.4 - 'pfdisplay.cgi' Code Execution
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by J.A. Gutierrez · textremoteaix
https://www.exploit-db.com/exploits/19048
The exploit leverages a command injection vulnerability in the pfdispaly.cgi CGI program on IRIX systems. By appending a newline and arbitrary command to the query string, an attacker can execute system commands, such as spawning an xterm to a remote display.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
IRIX pfdispaly.cgi (unpatched, even with patch 3018)
No auth needed
Prerequisites:
Network access to the target IRIX system · CGI program pfdispaly.cgi must be accessible
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026