EIP-2026-109421

PRE-CVE

Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109421. PoCs published by r0t3d3Vil.

AI-analyzed exploit summary The provided text describes multiple input validation vulnerabilities in Mercury CMS 4.0, including SQL injection and XSS. It outlines attack vectors via URL parameters but lacks functional exploit code.

Description

Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities

Exploits (1)

exploitdb WRITEUP VERIFIED

by r0t3d3Vil · textwebappsphp

https://www.exploit-db.com/exploits/26912

View Code ZIP pw:eip

The provided text describes multiple input validation vulnerabilities in Mercury CMS 4.0, including SQL injection and XSS. It outlines attack vectors via URL parameters but lacks functional exploit code.

Classification

Writeup 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Theoretical

Target: Mercury CMS 4.0

No auth needed

Prerequisites: Access to the target application's URL

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026