EIP-2026-100267
PRE-CVEDMXReady News Manager 1.1 - Arbitrary Category Change
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100267. PoCs published by ajann.
AI-analyzed exploit summary This is a technical writeup describing a remote category change vulnerability in DMXReady News Manager <= 1.1. It provides details on how to exploit the vulnerability by brute-forcing the category ID parameter in the URL.
Description
DMXReady News Manager 1.1 - Arbitrary Category Change
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by ajann · textwebappsasp
https://www.exploit-db.com/exploits/7752
This is a technical writeup describing a remote category change vulnerability in DMXReady News Manager <= 1.1. It provides details on how to exploit the vulnerability by brute-forcing the category ID parameter in the URL.
Classification
Writeup 80%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
DMXReady News Manager <= 1.1
No auth needed
Prerequisites:
Access to the target URL with the vulnerable parameter
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026