EIP-2026-101421

PRE-CVE

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101421. PoCs published by Louhi Networks.

AI-analyzed exploit summary This advisory details multiple vulnerabilities in Rittal CMC-TC PU II, including XSS (Type I and II), weak session management, and insecure default configurations. It provides technical analysis, proof-of-concept examples, and remediation steps.

Description

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities

Exploits (1)

exploitdb WRITEUP VERIFIED
by Louhi Networks · textremotehardware
https://www.exploit-db.com/exploits/8269

This advisory details multiple vulnerabilities in Rittal CMC-TC PU II, including XSS (Type I and II), weak session management, and insecure default configurations. It provides technical analysis, proof-of-concept examples, and remediation steps.

Classification
Writeup 100%
Attack Type
Xss | Auth Bypass | Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Rittal CMC-TC PU II DK 7320.100 SW: V2.45 HW: V3.01
No auth needed
Prerequisites: Network access to the device · Default credentials (if unchanged) · Knowledge of administrator login time for session prediction
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026