EIP-2026-104706

PRE-CVE

suPHP 0.7 - 'suPHP_ConfigPath' / 'Safe_Mode()' Restriction Bypass

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104706. PoCs published by Mr.SaFa7.

AI-analyzed exploit summary This exploit bypasses PHP safe_mode restrictions by creating a malicious php.ini and .htaccess file to disable safe_mode and disable_functions. It then executes system commands to gather system information.

Description

suPHP 0.7 - 'suPHP_ConfigPath' / 'Safe_Mode()' Restriction Bypass

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mr.SaFa7 · phplocalphp

https://www.exploit-db.com/exploits/32693

View Code ZIP pw:eip

This exploit bypasses PHP safe_mode restrictions by creating a malicious php.ini and .htaccess file to disable safe_mode and disable_functions. It then executes system commands to gather system information.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: suPHP (versions affected by CVE-2026-104700)

No auth needed

Prerequisites: Write access to the target directory · suPHP configured to use suPHP_ConfigPath

MITRE ATT&CK

T1552.001 - Credentials In Files T1204.002 - Malicious File

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026