Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100968. PoCs published by kingcope.
AI-analyzed exploit summary This exploit demonstrates a jail breakout in NcFTPd <= 2.8.5 by leveraging the 'site symlink' command to create a symbolic link to /etc/passwd, allowing unauthorized file access. The PoC shows a valid user account is required to execute the attack.
Description
NcFTPd 2.8.5 - Remote Jail Breakout
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by kingcope · textremotefreebsd
https://www.exploit-db.com/exploits/9278
This exploit demonstrates a jail breakout in NcFTPd <= 2.8.5 by leveraging the 'site symlink' command to create a symbolic link to /etc/passwd, allowing unauthorized file access. The PoC shows a valid user account is required to execute the attack.
Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
NcFTPd <= 2.8.5
Auth required
Prerequisites:
Valid user account on the target NcFTPd server
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026