EIP-2026-104043

PRE-CVE

OrientDB 2.2.2 < 2.2.22 - Remote Code Execution (Metasploit)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104043. PoCs published by Metasploit.

AI-analyzed exploit summary This Metasploit module exploits a privilege escalation vulnerability in OrientDB 2.2.x to achieve remote code execution by creating and triggering a malicious Groovy function via HTTP requests.

Description

OrientDB 2.2.2 < 2.2.22 - Remote Code Execution (Metasploit)

Exploits (1)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotemultiple

https://www.exploit-db.com/exploits/42965

View Code ZIP pw:eip

This Metasploit module exploits a privilege escalation vulnerability in OrientDB 2.2.x to achieve remote code execution by creating and triggering a malicious Groovy function via HTTP requests.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: OrientDB 2.2.2 to 2.2.22

Auth required

Prerequisites: Valid credentials for OrientDB · Network access to OrientDB server on port 2480

MITRE ATT&CK

T1059 - Command and Scripting Interpreter T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026