EIP-2026-103253

PRE-CVE

zkfingerd 0.9.1 - 'say()' Format String

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103253. PoCs published by Marceta Milos.

AI-analyzed exploit summary This exploit targets a format string vulnerability in zkfingerd-r3-0.9, allowing remote code execution by corrupting memory via crafted input. It includes shellcode for privilege escalation and a brute-force mechanism for bypassing ASLR.

Description

zkfingerd 0.9.1 - 'say()' Format String

Exploits (1)

exploitdb WORKING POC VERIFIED
by Marceta Milos · cremotelinux
https://www.exploit-db.com/exploits/22101

This exploit targets a format string vulnerability in zkfingerd-r3-0.9, allowing remote code execution by corrupting memory via crafted input. It includes shellcode for privilege escalation and a brute-force mechanism for bypassing ASLR.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: zkfingerd-r3-0.9
No auth needed
Prerequisites: Network access to the target service on port 79 · Target running zkfingerd-r3-0.9
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026