EIP-2026-102091
PRE-CVEUnicorn Router WB-3300NR - Cross-Site Request Forgery (Factory Reset/DNS Change)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102091. PoCs published by absane.
AI-analyzed exploit summary The exploit demonstrates CSRF vulnerabilities in the Unicorn Router WB-3300NR, allowing factory reset, DNS change, and potential WPA password disclosure via crafted HTML forms. The PoC includes functional code for executing these actions without authentication.
Description
Unicorn Router WB-3300NR - Cross-Site Request Forgery (Factory Reset/DNS Change)
Exploits (1)
exploitdb
WORKING POC
by absane · textwebappshardware
https://www.exploit-db.com/exploits/29312
The exploit demonstrates CSRF vulnerabilities in the Unicorn Router WB-3300NR, allowing factory reset, DNS change, and potential WPA password disclosure via crafted HTML forms. The PoC includes functional code for executing these actions without authentication.
Classification
Working Poc 100%
Attack Type
Csrf
Complexity
Trivial
Reliability
Reliable
Target:
Unicorn Router WB-3300NR v1.0 (Firmware V5.07.18_ko_UIS02)
No auth needed
Prerequisites:
Victim must visit a malicious webpage while on the same network as the vulnerable router
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026