EIP-2026-102769

PRE-CVE

(shellcode) Linux-x64 - create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102769. PoCs published by Alexys (0x177git).

AI-analyzed exploit summary This is a Linux x86_64 shellcode that uses XOR encryption to obfuscate the '/bin//sh' string and executes it via the execve() syscall. It is a minimal shellcode example for spawning a shell.

Description

(shellcode) Linux-x64 - create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]

Exploits (1)

exploitdb WORKING POC
by Alexys (0x177git) · clocallinux
https://www.exploit-db.com/exploits/51834

This is a Linux x86_64 shellcode that uses XOR encryption to obfuscate the '/bin//sh' string and executes it via the execve() syscall. It is a minimal shellcode example for spawning a shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Linux x86_64 systems
No auth needed
Prerequisites: Execution on a vulnerable Linux x86_64 system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026