EIP-2026-103833

PRE-CVE

ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103833. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit leverages an authentication bypass via the Host header and a directory traversal vulnerability in the DeploymentServlet to upload a malicious PHP file, achieving remote code execution on ABB Cylon Aspect systems.

Description

ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)

Exploits (1)

exploitdb WORKING POC

by LiquidWorm · textremotemultiple

https://www.exploit-db.com/exploits/52317

View Code ZIP pw:eip

This exploit leverages an authentication bypass via the Host header and a directory traversal vulnerability in the DeploymentServlet to upload a malicious PHP file, achieving remote code execution on ABB Cylon Aspect systems.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: ABB Cylon Aspect (Firmware <=3.08.04)

No auth needed

Prerequisites: Network access to the target system · Target system running vulnerable firmware

MITRE ATT&CK

T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026