EIP-2026-102386

PRE-CVE

Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102386. PoCs published by hongphukt.

AI-analyzed exploit summary This exploit demonstrates an unauthenticated directory traversal vulnerability in Jinfornet JReport 15.6, allowing remote attackers to read arbitrary files on the system via path traversal sequences in the SendFileServlet.

Description

Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal

Exploits (1)

exploitdb WORKING POC
by hongphukt · pythonwebappsjava
https://www.exploit-db.com/exploits/48260

This exploit demonstrates an unauthenticated directory traversal vulnerability in Jinfornet JReport 15.6, allowing remote attackers to read arbitrary files on the system via path traversal sequences in the SendFileServlet.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Jinfornet JReport 15.6
No auth needed
Prerequisites: Network access to the target JReport server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026