EIP-2026-104029

PRE-CVE

Oracle 9i/10g - 'read/write/execute' ation Suite

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104029. PoCs published by Marco Ivaldi.

AI-analyzed exploit summary This is a functional Java-based exploitation suite for Oracle databases, enabling file read/write and OS command execution with RDBMS privileges. It leverages Oracle's Java integration to execute arbitrary commands via stored procedures.

Description

Oracle 9i/10g - 'read/write/execute' ation Suite

Exploits (1)

exploitdb WORKING POC VERIFIED

by Marco Ivaldi · remotemultiple

https://www.exploit-db.com/exploits/2837

View Code ZIP pw:eip

This is a functional Java-based exploitation suite for Oracle databases, enabling file read/write and OS command execution with RDBMS privileges. It leverages Oracle's Java integration to execute arbitrary commands via stored procedures.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Oracle Database (requires DBA role and SYS:java permissions)

Auth required

Prerequisites: DBA role access · SYS:java permissions · Oracle Java integration enabled

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026