EIP-2026-102847
PRE-CVEGKrellM GKrellWeather 0.2.7 Plugin - Local Stack Buffer Overflow
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102847. PoCs published by forensec.
AI-analyzed exploit summary This exploit targets a local stack-based buffer overflow in the GKrellWeather plugin for GKrellM (version 0.2.7). It injects shellcode via an environment variable and overwrites the return address to execute arbitrary code, potentially leading to privilege escalation if combined with sudo misconfigurations.
Description
GKrellM GKrellWeather 0.2.7 Plugin - Local Stack Buffer Overflow
Exploits (1)
This exploit targets a local stack-based buffer overflow in the GKrellWeather plugin for GKrellM (version 0.2.7). It injects shellcode via an environment variable and overwrites the return address to execute arbitrary code, potentially leading to privilege escalation if combined with sudo misconfigurations.