Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-103108. PoCs published by eKKiM.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Exim's sender_address parameter to execute arbitrary commands via SMTP. It downloads and executes a Perl reverse shell script, achieving remote code execution (RCE).
Description
Exim - 'sender_address' Remote Code Execution
Exploits (1)
exploitdb
WORKING POC
by eKKiM · pythonremotelinux
https://www.exploit-db.com/exploits/25970
This exploit leverages a command injection vulnerability in Exim's sender_address parameter to execute arbitrary commands via SMTP. It downloads and executes a Perl reverse shell script, achieving remote code execution (RCE).
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Exim (version not specified, but likely older versions vulnerable to CVE-2026-145766)
No auth needed
Prerequisites:
SMTP access to the target Exim server · Ability to host a Perl reverse shell script on an accessible web server
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026