EIP-2026-103869

PRE-CVE

Axis Communications MPQT/PACS 5.20.x - Server-Side Include Daemon Remote Format String

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103869. PoCs published by bashis.

AI-analyzed exploit summary This is a functional remote format string exploit for Axis Communications MPQT/PACS SSI Daemon, targeting multiple architectures (MIPS/CRISv32/ARM). It leverages a heap-based blind format string vulnerability to achieve remote code execution as root via crafted HTTP requests.

Description

Axis Communications MPQT/PACS 5.20.x - Server-Side Include Daemon Remote Format String

Exploits (1)

exploitdb WORKING POC
by bashis · pythonremotemultiple
https://www.exploit-db.com/exploits/40125

This is a functional remote format string exploit for Axis Communications MPQT/PACS SSI Daemon, targeting multiple architectures (MIPS/CRISv32/ARM). It leverages a heap-based blind format string vulnerability to achieve remote code execution as root via crafted HTTP requests.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Axis Communications MPQT/PACS SSI Daemon (versions 5.20.x and later)
No auth needed
Prerequisites: Network access to the target device · SSI Daemon running on the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026