EIP-2026-102328

PRE-CVE

SGI IRIX 6.4 - 'datman'/'cdman' Local Privilege Escalation

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102328. PoCs published by Yuri Volobuev.

AI-analyzed exploit summary This exploit leverages a command injection vulnerability in the datman/cdman program on Irix 6.2 and 5.3. By manipulating the database directory argument, an attacker can execute arbitrary commands as root via a system() call.

Description

SGI IRIX 6.4 - 'datman'/'cdman' Local Privilege Escalation

Exploits (1)

exploitdb WORKING POC VERIFIED
by Yuri Volobuev · textlocalirix
https://www.exploit-db.com/exploits/19275

This exploit leverages a command injection vulnerability in the datman/cdman program on Irix 6.2 and 5.3. By manipulating the database directory argument, an attacker can execute arbitrary commands as root via a system() call.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Irix 6.2 and 5.3 (datman/cdman)
No auth needed
Prerequisites: Access to a vulnerable Irix system · Ability to create files in the user's home directory
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026