EIP-2026-102415

PRE-CVE

Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102415. PoCs published by Buherátor.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Oracle NoSQL 11g 1.1.100 R2, allowing an attacker to read arbitrary local files by manipulating the 'log' parameter in the LogDownloadService endpoint.

Description

Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal

Exploits (1)

exploitdb WORKING POC
by Buherátor · textwebappsjava
https://www.exploit-db.com/exploits/36292

This exploit demonstrates a directory traversal vulnerability in Oracle NoSQL 11g 1.1.100 R2, allowing an attacker to read arbitrary local files by manipulating the 'log' parameter in the LogDownloadService endpoint.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Oracle NoSQL 11g 1.1.100 R2
No auth needed
Prerequisites: Network access to the vulnerable Oracle NoSQL instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026