EIP-2026-101787

PRE-CVE

Huawei Home Gateway UPnP/1.0 IGD/1.00 - Password Change

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101787. PoCs published by Fady Mohammed Osman.

AI-analyzed exploit summary This exploit leverages a password change vulnerability in Huawei Home Gateway devices by sending a crafted SOAP request to change the admin password without authentication. The exploit targets the UPnP interface on port 80.

Description

Huawei Home Gateway UPnP/1.0 IGD/1.00 - Password Change

Exploits (1)

exploitdb WORKING POC

by Fady Mohammed Osman · pythonwebappshardware

https://www.exploit-db.com/exploits/37425

View Code ZIP pw:eip

This exploit leverages a password change vulnerability in Huawei Home Gateway devices by sending a crafted SOAP request to change the admin password without authentication. The exploit targets the UPnP interface on port 80.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Huawei Home Gateway (HG530, HG520b) with UPnP/1.0 IGD/1.00

No auth needed

Prerequisites: Network access to the target device · UPnP service exposed on port 80

MITRE ATT&CK

T1110.001 - Password Guessing T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026