Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-101819. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated SQL injection vulnerability in KevinLAB BEMS 1.0, allowing authentication bypass via crafted POST requests. The PoC includes payloads for both SQLi extraction and direct bypass using boolean-based injection.
Description
KevinLAB BEMS 1.0 - Authentication Bypass
Exploits (1)
exploitdb
WORKING POC
by LiquidWorm · textwebappshardware
https://www.exploit-db.com/exploits/50146
This exploit demonstrates an unauthenticated SQL injection vulnerability in KevinLAB BEMS 1.0, allowing authentication bypass via crafted POST requests. The PoC includes payloads for both SQLi extraction and direct bypass using boolean-based injection.
Classification
Working Poc 90%
Attack Type
Sqli | Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
KevinLAB 4ST L-BEMS 1.0.0
No auth needed
Prerequisites:
Network access to the target application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026