Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-108982. PoCs published by saudi0hacker.
AI-analyzed exploit summary This is a basic writeup describing a file upload vulnerability in kcfinder 2.x, allowing an attacker to bypass file extension checks by uploading a malicious PHP file with a .jpg extension. No actual exploit code is provided.
Description
KCFinder 2.2 - Arbitrary File Upload
Exploits (1)
exploitdb
WRITEUP
by saudi0hacker · textwebappsphp
https://www.exploit-db.com/exploits/15254
This is a basic writeup describing a file upload vulnerability in kcfinder 2.x, allowing an attacker to bypass file extension checks by uploading a malicious PHP file with a .jpg extension. No actual exploit code is provided.
Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target:
kcfinder 2.x
No auth needed
Prerequisites:
access to the KCFinder upload interface
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026