EIP-2026-103059

PRE-CVE

Antologic Antolinux 1.0 - Administrative Interface 'NDCR' Remote Command Execution

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103059. PoCs published by Himeur Nourredine.

AI-analyzed exploit summary The exploit demonstrates a command injection vulnerability in Antologic Antolinux via the 'NDCR' parameter in specific PHP scripts. The issue arises due to insufficient input sanitization, allowing arbitrary command execution with server privileges.

Description

Antologic Antolinux 1.0 - Administrative Interface 'NDCR' Remote Command Execution

Exploits (1)

exploitdb WORKING POC VERIFIED

by Himeur Nourredine · textremotelinux

https://www.exploit-db.com/exploits/23604

View Code ZIP pw:eip

The exploit demonstrates a command injection vulnerability in Antologic Antolinux via the 'NDCR' parameter in specific PHP scripts. The issue arises due to insufficient input sanitization, allowing arbitrary command execution with server privileges.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Antologic Antolinux 1.0

No auth needed

Prerequisites: HTTP REFERER spoofing · sudo not enabled

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026