EIP-2026-101474

PRE-CVE

THOMSON TG585n 7.4.3.2 - 'user.ini' Arbitrary Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101474. PoCs published by AnTi SeCuRe.

AI-analyzed exploit summary This entry describes an arbitrary file download vulnerability in THOMSON TG585n routers via the '/cgi/b/backup/user.ini' endpoint. It provides system information and a URL to exploit the vulnerability but lacks executable code.

Description

THOMSON TG585n 7.4.3.2 - 'user.ini' Arbitrary Disclosure

Exploits (1)

exploitdb WRITEUP
by AnTi SeCuRe · textremotehardware
https://www.exploit-db.com/exploits/10362

This entry describes an arbitrary file download vulnerability in THOMSON TG585n routers via the '/cgi/b/backup/user.ini' endpoint. It provides system information and a URL to exploit the vulnerability but lacks executable code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: THOMSON TG585n (Software Release: 7.4.3.2)
No auth needed
Prerequisites: Network access to the router's web interface
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026