EIP-2026-102199

PRE-CVE

FTP Media Server 3.0 - Authentication Bypass / Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102199. PoCs published by Wh1t3Rh1n0 (Michael Allen).

AI-analyzed exploit summary This exploit demonstrates an authentication bypass and DoS vulnerability in FTP Media Server 3.0. It allows unauthenticated file retrieval from the 'Camera Roll' directory and can crash the server with an invalid PORT command.

Description

FTP Media Server 3.0 - Authentication Bypass / Denial of Service

Exploits (1)

exploitdb WORKING POC VERIFIED
by Wh1t3Rh1n0 (Michael Allen) · pythonremoteios
https://www.exploit-db.com/exploits/37097

This exploit demonstrates an authentication bypass and DoS vulnerability in FTP Media Server 3.0. It allows unauthenticated file retrieval from the 'Camera Roll' directory and can crash the server with an invalid PORT command.

Classification
Working Poc 95%
Attack Type
Auth Bypass | Dos
Complexity
Trivial
Reliability
Reliable
Target: FTP Media Server 3.0
No auth needed
Prerequisites: Network access to the FTP server · FTP Media Server 3.0 running on target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026