EIP-2026-100809

PRE-CVE

GWExtranet - Multiple Directory Traversal Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100809. PoCs published by joseph.giron13.

AI-analyzed exploit summary This exploit demonstrates directory traversal vulnerabilities in GWExtranet by manipulating the 'template' and 'file' parameters to access arbitrary files (e.g., boot.ini, scp.dll) on the vulnerable system. The PoC provides direct URLs to exploit the flaw without requiring authentication.

Description

GWExtranet - Multiple Directory Traversal Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by joseph.giron13 · textwebappscgi
https://www.exploit-db.com/exploits/30795

This exploit demonstrates directory traversal vulnerabilities in GWExtranet by manipulating the 'template' and 'file' parameters to access arbitrary files (e.g., boot.ini, scp.dll) on the vulnerable system. The PoC provides direct URLs to exploit the flaw without requiring authentication.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: GWExtranet (version unspecified)
No auth needed
Prerequisites: Network access to the vulnerable GWExtranet instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026