Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102516. PoCs published by mr_me.
AI-analyzed exploit summary This exploit targets Openedit CMS <= v5.1294, chaining admin hash disclosure, authentication bypass, and unprotected file upload to achieve remote code execution via a JSP shell.
Description
Openedit 5.1294 - Remote Code Execution
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by mr_me · pythonwebappsjsp
https://www.exploit-db.com/exploits/16157
This exploit targets Openedit CMS <= v5.1294, chaining admin hash disclosure, authentication bypass, and unprotected file upload to achieve remote code execution via a JSP shell.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Openedit CMS v5.1294
No auth needed
Prerequisites:
Network access to the target · Openedit CMS <= v5.1294 installed · File upload functionality enabled
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026