EIP-2026-102970

PRE-CVE

RedHat 6.1/6.2/7.0/7.1 - Man Cache File Creation

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102970. PoCs published by jenggo.

AI-analyzed exploit summary This exploit leverages a symlink redirection vulnerability in the 'man' system manual pager program to cache malicious files in the system cache directory, potentially leading to privilege escalation when another user executes 'man' on a non-existent command.

Description

RedHat 6.1/6.2/7.0/7.1 - Man Cache File Creation

Exploits (1)

exploitdb WORKING POC VERIFIED
by jenggo · bashlocallinux
https://www.exploit-db.com/exploits/20898

This exploit leverages a symlink redirection vulnerability in the 'man' system manual pager program to cache malicious files in the system cache directory, potentially leading to privilege escalation when another user executes 'man' on a non-existent command.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: man <= man-1.5h1-20
No auth needed
Prerequisites: Local access to the system · Presence of a command without a man page (e.g., 'netconf') · SGID/SUID 'man' binary
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026