Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102931. PoCs published by Bernardo Damele.
AI-analyzed exploit summary This exploit provides a MySQL User Defined Function (UDF) for executing arbitrary system commands. It leverages the lib_mysqludf_sys library to enable command execution within MySQL, which can lead to remote code execution if an attacker can load the UDF into the database.
Description
MySQL 4/5/6 - UDF for Command Execution
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Bernardo Damele · textlocallinux
https://www.exploit-db.com/exploits/7856
This exploit provides a MySQL User Defined Function (UDF) for executing arbitrary system commands. It leverages the lib_mysqludf_sys library to enable command execution within MySQL, which can lead to remote code execution if an attacker can load the UDF into the database.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
MySQL (versions supporting UDFs)
Auth required
Prerequisites:
MySQL server access with sufficient privileges to load UDFs · Ability to upload the shared library to the server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026