EIP-2026-103139

PRE-CVE

Horde 1.2.x/2.1.3 and Imp 2.2.x/3.1.2 - File Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103139. PoCs published by Caldera Open Linux.

AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Horde Imp. The issue allows an attacker to access arbitrary system files by manipulating the mailbox parameter in a URI request.

Description

Horde 1.2.x/2.1.3 and Imp 2.2.x/3.1.2 - File Disclosure

Exploits (1)

exploitdb WRITEUP VERIFIED
by Caldera Open Linux · textremotelinux
https://www.exploit-db.com/exploits/21019

This is a writeup describing a directory traversal vulnerability in Horde Imp. The issue allows an attacker to access arbitrary system files by manipulating the mailbox parameter in a URI request.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Horde Imp (version not specified)
No auth needed
Prerequisites: Access to the vulnerable Horde Imp instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026