EIP-2026-104146

PRE-CVE

ABB Cylon Aspect 3.07.02 - File Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104146. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit demonstrates an authenticated arbitrary file disclosure vulnerability in ABB Cylon Aspect via directory traversal in the 'downloadDb.php' script. The PoC uses a crafted HTTP request to retrieve sensitive files like '/etc/passwd'.

Description

ABB Cylon Aspect 3.07.02 - File Disclosure

Exploits (1)

exploitdb WORKING POC
by LiquidWorm · webappsmultiple
https://www.exploit-db.com/exploits/52115

This exploit demonstrates an authenticated arbitrary file disclosure vulnerability in ABB Cylon Aspect via directory traversal in the 'downloadDb.php' script. The PoC uses a crafted HTTP request to retrieve sensitive files like '/etc/passwd'.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: ABB Cylon Aspect <=3.07.02
Auth required
Prerequisites: Valid session cookie (PHPSESSID)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026