EIP-2026-108989

PRE-CVE

Kemana Directory 1.5.6 - Remote Code Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108989. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit demonstrates an authenticated arbitrary file upload vulnerability in Kemana Directory 1.5.6, allowing remote code execution by uploading a malicious PHP script via multiple modules. The uploaded file is stored in the '/public/image/' directory and can be executed with a GET request.

Description

Kemana Directory 1.5.6 - Remote Code Execution

Exploits (1)

exploitdb WORKING POC
by LiquidWorm · textwebappsphp
https://www.exploit-db.com/exploits/32507

This exploit demonstrates an authenticated arbitrary file upload vulnerability in Kemana Directory 1.5.6, allowing remote code execution by uploading a malicious PHP script via multiple modules. The uploaded file is stored in the '/public/image/' directory and can be executed with a GET request.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Kemana Directory 1.5.6
Auth required
Prerequisites: Authenticated user with 'Regular' or 'Editor' privileges · Access to vulnerable modules for file upload
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026