EIP-2026-100876

PRE-CVE

Pete Stein GoScript 2.0 - Remote Command Execution

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100876. PoCs published by Francisco Alisson.

AI-analyzed exploit summary The exploit demonstrates a command injection vulnerability in Pete Stein GoScript via the 'go.cgi' script. Attackers can execute arbitrary commands by appending them to the URL parameters 'artarchive' or directly to the script path.

Description

Pete Stein GoScript 2.0 - Remote Command Execution

Exploits (1)

exploitdb WORKING POC VERIFIED

by Francisco Alisson · textwebappscgi

https://www.exploit-db.com/exploits/24347

View Code ZIP pw:eip

The exploit demonstrates a command injection vulnerability in Pete Stein GoScript via the 'go.cgi' script. Attackers can execute arbitrary commands by appending them to the URL parameters 'artarchive' or directly to the script path.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Pete Stein GoScript

No auth needed

Prerequisites: Access to the vulnerable 'go.cgi' script on the target server

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1202 - Indirect Command Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026