Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-108065. PoCs published by BlackHawk.
AI-analyzed exploit summary This exploit targets JaxUltraBB v2.0 by injecting PHP code into the forum configuration file via a topic reply, creating a backdoor (piggy_marty.php) for remote command execution. It requires valid user credentials to authenticate and exploit the vulnerability.
Description
JaxUltraBB 2.0 - Command Execution
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by BlackHawk · phpwebappsphp
https://www.exploit-db.com/exploits/2643
This exploit targets JaxUltraBB v2.0 by injecting PHP code into the forum configuration file via a topic reply, creating a backdoor (piggy_marty.php) for remote command execution. It requires valid user credentials to authenticate and exploit the vulnerability.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
JaxUltraBB v2.0
Auth required
Prerequisites:
Valid username and password for the target JaxUltraBB instance · Network access to the target web server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026