EIP-2026-104201

PRE-CVE

Citadel WebCit < 926 - Session Hijacking Exploit

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104201. PoCs published by Simone Quatrini.

AI-analyzed exploit summary This exploit demonstrates a session hijacking vulnerability in Citadel WebCit versions prior to 926. It harvests valid session cookies by brute-forcing timestamps and decoding the 'webcit' cookie to extract user credentials.

Description

Citadel WebCit < 926 - Session Hijacking Exploit

Exploits (1)

exploitdb WORKING POC

by Simone Quatrini · pythonwebappsmultiple

https://www.exploit-db.com/exploits/48975

View Code ZIP pw:eip

This exploit demonstrates a session hijacking vulnerability in Citadel WebCit versions prior to 926. It harvests valid session cookies by brute-forcing timestamps and decoding the 'webcit' cookie to extract user credentials.

Classification

Working Poc 95%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: Citadel WebCit < 926

No auth needed

Prerequisites: Network access to the target WebCit instance · WebCit version < 926

MITRE ATT&CK

T1557 - Adversary-in-the-Middle T1552 - Unsecured Credentials

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026