Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107079. PoCs published by Emre ÖVÜNÇ.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FHEM 6.0 by manipulating the 'file' parameter in a GET request to read arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request that exploits the vulnerability to leak sensitive information.
Description
FHEM 6.0 - Local File Inclusion
Exploits (1)
exploitdb
WORKING POC
by Emre ÖVÜNÇ · textwebappsphp
https://www.exploit-db.com/exploits/48621
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FHEM 6.0 by manipulating the 'file' parameter in a GET request to read arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request that exploits the vulnerability to leak sensitive information.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
FHEM v6.0
No auth needed
Prerequisites:
Network access to the FHEM web interface
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026