EIP-2026-107954

PRE-CVE

IRIS Citations Management Tool - (Authenticated) Remote Command Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107954. PoCs published by aeon.

AI-analyzed exploit summary This exploit targets a post-authentication remote command execution vulnerability in I Read It Somewhere (IRIS) <= v1.3. It requires a valid user account and internet connectivity on the target system. The exploit is described as functional but with messy code.

Description

IRIS Citations Management Tool - (Authenticated) Remote Command Execution

Exploits (1)

exploitdb WORKING POC
by aeon · textwebappsphp
https://www.exploit-db.com/exploits/24480

This exploit targets a post-authentication remote command execution vulnerability in I Read It Somewhere (IRIS) <= v1.3. It requires a valid user account and internet connectivity on the target system. The exploit is described as functional but with messy code.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: I Read It Somewhere (IRIS) <= v1.3
Auth required
Prerequisites: Valid user account · Target with outgoing internet connectivity
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026