EIP-2026-101326

PRE-CVE

iphone ishred 1.93 - Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101326. PoCs published by Khashayar Fereidani.

AI-analyzed exploit summary This Python script exploits a directory traversal vulnerability in iPhone ishred 1.93 to read arbitrary files from the device. It constructs a URL with traversal sequences to access sensitive files like AddressBook.sqlitedb or /etc/passwd.

Description

iphone ishred 1.93 - Directory Traversal

Exploits (1)

exploitdb WORKING POC
by Khashayar Fereidani · textremotehardware
https://www.exploit-db.com/exploits/16238

This Python script exploits a directory traversal vulnerability in iPhone ishred 1.93 to read arbitrary files from the device. It constructs a URL with traversal sequences to access sensitive files like AddressBook.sqlitedb or /etc/passwd.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: iPhone ishred 1.93
No auth needed
Prerequisites: Network access to the vulnerable iShred service · Service running on default or known port (e.g., 2112)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026