Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100742. PoCs published by Silentium.
AI-analyzed exploit summary This exploit targets AWStats versions 5.7 to 6.2 by leveraging command injection vulnerabilities in the 'configdir', 'update', and 'pluginmode' parameters. It sends a crafted HTTP GET request to execute arbitrary commands on the target system with HTTPD privileges.
Description
AWStats 5.7 < 6.2 - Multiple Remote
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Silentium · cwebappscgi
https://www.exploit-db.com/exploits/840
This exploit targets AWStats versions 5.7 to 6.2 by leveraging command injection vulnerabilities in the 'configdir', 'update', and 'pluginmode' parameters. It sends a crafted HTTP GET request to execute arbitrary commands on the target system with HTTPD privileges.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
AWStats v5.7 - v6.2
No auth needed
Prerequisites:
Target must be running a vulnerable version of AWStats · Target must have the AWStats CGI script accessible
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026