Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102770. PoCs published by Sha0.
AI-analyzed exploit summary This is a Linux ELF binary infection exploit that modifies the entry point of an ELF executable to execute a payload (chmod setuid) when the infected binary is run by root. It uses mmap and direct syscalls to inject and restore code.
Description
.ELF Binaries - Local Privilege Escalation
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Sha0 · locallinux
https://www.exploit-db.com/exploits/2492
This is a Linux ELF binary infection exploit that modifies the entry point of an ELF executable to execute a payload (chmod setuid) when the infected binary is run by root. It uses mmap and direct syscalls to inject and restore code.
Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Complex
Reliability
Reliable
Target:
Linux ELF binaries (unspecified version)
No auth needed
Prerequisites:
Write access to a target ELF binary · Root execution of the infected binary
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026