EIP-2026-107108

PRE-CVE

FireEye Appliance - Unauthorized File Disclosure

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107108. PoCs published by Kristian Erik Hermansen.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in FireEye's NEI_ModuleDispatch.php, allowing unauthorized remote access to sensitive files like /etc/passwd. The web server runs as root, exacerbating the severity of the flaw.

Description

FireEye Appliance - Unauthorized File Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kristian Erik Hermansen · textwebappsphp

https://www.exploit-db.com/exploits/38090

View Code ZIP pw:eip

This exploit demonstrates a directory traversal vulnerability in FireEye's NEI_ModuleDispatch.php, allowing unauthorized remote access to sensitive files like /etc/passwd. The web server runs as root, exacerbating the severity of the flaw.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: FireEye appliance (version unspecified)

No auth needed

Prerequisites: Network access to the FireEye appliance · Web server running NEI_ModuleDispatch.php

MITRE ATT&CK

T1006 - Direct Volume Access T1083 - File and Directory Discovery

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026