EIP-2026-100783

PRE-CVE

Davolink DV-2051 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100783. PoCs published by Eric Flokstra.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in the Davolink DV-2051 modem, including unauthenticated admin password change, CSRF, and persistent XSS. The PoC provides direct HTTP requests to exploit these issues without requiring prior authentication.

Description

Davolink DV-2051 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC
by Eric Flokstra · textwebappscgi
https://www.exploit-db.com/exploits/40205

The exploit demonstrates multiple vulnerabilities in the Davolink DV-2051 modem, including unauthenticated admin password change, CSRF, and persistent XSS. The PoC provides direct HTTP requests to exploit these issues without requiring prior authentication.

Classification
Working Poc 100%
Attack Type
Auth Bypass | Xss | Other
Complexity
Trivial
Reliability
Reliable
Target: Davolink DV-2051 modem
No auth needed
Prerequisites: Network access to the target modem · Knowledge of the modem's IP address
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026