EIP-2026-101899

PRE-CVE

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101899. PoCs published by Sebastián Magof.

AI-analyzed exploit summary This Perl script exploits an information disclosure vulnerability in the Nucom ADSL R5000UNv2 modem by fetching the guidewan.html page and extracting base64-encoded ISP credentials. The credentials are decoded twice to reveal the plaintext username and password.

Description

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure

Exploits (1)

exploitdb WORKING POC
by Sebastián Magof · perlwebappshardware
https://www.exploit-db.com/exploits/34779

This Perl script exploits an information disclosure vulnerability in the Nucom ADSL R5000UNv2 modem by fetching the guidewan.html page and extracting base64-encoded ISP credentials. The credentials are decoded twice to reveal the plaintext username and password.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Nucom ADSL R5000UNv2 (Firmware Version: 2.00(R5TC008))
No auth needed
Prerequisites: Access to the local network where the modem is located · Modem must be using default or known IP address (192.168.1.1)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026