EIP-2026-104073
PRE-CVEServletExec - Directory Traversal / Authentication Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104073. PoCs published by Stefano Di Paola.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in ServletExec by providing a crafted URL that accesses sensitive files (e.g., web.xml) and bypasses authentication to access administrative pages. The vulnerability arises from insufficient input sanitization.
Description
ServletExec - Directory Traversal / Authentication Bypass
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in ServletExec by providing a crafted URL that accesses sensitive files (e.g., web.xml) and bypasses authentication to access administrative pages. The vulnerability arises from insufficient input sanitization.