EIP-2026-102445

PRE-CVE

REDDOXX Appliance Build 2032 / 2.0.625 - Arbitrary File Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102445. PoCs published by RedTeam Pentesting.

AI-analyzed exploit summary This exploit demonstrates an arbitrary file disclosure vulnerability in REDDOXX Appliance, allowing unauthenticated attackers to list directory contents and download arbitrary files with root privileges via the RdxEngine-API.

Description

REDDOXX Appliance Build 2032 / 2.0.625 - Arbitrary File Disclosure

Exploits (1)

exploitdb WORKING POC
by RedTeam Pentesting · textwebappsjson
https://www.exploit-db.com/exploits/42372

This exploit demonstrates an arbitrary file disclosure vulnerability in REDDOXX Appliance, allowing unauthenticated attackers to list directory contents and download arbitrary files with root privileges via the RdxEngine-API.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: REDDOXX Appliance Build 2032 / v2.0.625
No auth needed
Prerequisites: Network access to the vulnerable REDDOXX appliance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026