EIP-2026-103092

PRE-CVE

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103092. PoCs published by Carlos Barros.

AI-analyzed exploit summary This is a functional remote root exploit for Cyrus IMSP Daemon (IMSPd) versions 1.5a6, 1.6a3, and 1.7. It leverages a buffer overflow in the 'abook_dbname' function via a crafted FETCHADDRESS command to achieve remote code execution.

Description

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED
by Carlos Barros · cremotelinux
https://www.exploit-db.com/exploits/23441

This is a functional remote root exploit for Cyrus IMSP Daemon (IMSPd) versions 1.5a6, 1.6a3, and 1.7. It leverages a buffer overflow in the 'abook_dbname' function via a crafted FETCHADDRESS command to achieve remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Cyrus IMSP Daemon (IMSPd) 1.5a6, 1.6a3, 1.7
No auth needed
Prerequisites: Network access to the IMSP service (port 406) · Target system running vulnerable IMSPd version
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026