Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-101257. PoCs published by Ian Sindermann.
AI-analyzed exploit summary This Python script exploits a remote command injection vulnerability in Drobo 5N2 NAS devices (firmware 4.1.1 and lower) by leveraging unauthenticated access to the NASd service. It includes multiple payloads for actions like installing applications, resetting credentials, and spawning root shells via crafted XML commands.
Description
Drobo 5N2 4.1.1 - Remote Command Injection
Exploits (1)
This Python script exploits a remote command injection vulnerability in Drobo 5N2 NAS devices (firmware 4.1.1 and lower) by leveraging unauthenticated access to the NASd service. It includes multiple payloads for actions like installing applications, resetting credentials, and spawning root shells via crafted XML commands.