EIP-2026-102854

PRE-CVE

GNU AN - Command Line Option Local Buffer Overflow

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102854. PoCs published by ace.

AI-analyzed exploit summary This exploit leverages a local buffer overflow in GNU an (gnuan) via the -s command-line option to overwrite EIP and execute arbitrary shellcode. The PoC includes a setuid(0) shellcode to escalate privileges on systems where gnuan is installed setuid/setgid.

Description

GNU AN - Command Line Option Local Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED
by ace · clocallinux
https://www.exploit-db.com/exploits/22861

This exploit leverages a local buffer overflow in GNU an (gnuan) via the -s command-line option to overwrite EIP and execute arbitrary shellcode. The PoC includes a setuid(0) shellcode to escalate privileges on systems where gnuan is installed setuid/setgid.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: GNU an (gnuan), all versions (tested on Red Hat 7.3)
No auth needed
Prerequisites: gnuan installed on the system · gnuan must be setuid/setgid for privilege escalation
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026