EIP-2026-101684

PRE-CVE

ECOA Building Automation System - Path Traversal Arbitrary File Upload

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101684. PoCs published by Neurogenesia.

AI-analyzed exploit summary This exploit demonstrates a path traversal and arbitrary file upload vulnerability in ECOA Building Automation System. Attackers can abuse the 'rbt' and 'filename' POST parameters to write files to arbitrary locations, potentially leading to remote code execution.

Description

ECOA Building Automation System - Path Traversal Arbitrary File Upload

Exploits (1)

exploitdb WORKING POC

by Neurogenesia · textwebappshardware

https://www.exploit-db.com/exploits/50276

View Code ZIP pw:eip

This exploit demonstrates a path traversal and arbitrary file upload vulnerability in ECOA Building Automation System. Attackers can abuse the 'rbt' and 'filename' POST parameters to write files to arbitrary locations, potentially leading to remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: ECOA Building Automation System (multiple versions including ECS Router Controller, RiskBuster Terminator, etc.)

No auth needed

Prerequisites: Network access to the vulnerable system · Ability to send HTTP POST requests

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026