EIP-2026-109792

PRE-CVE

mysource 2.14.8/2.16 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109792. PoCs published by Patrick Webster.

AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in MySource products, allowing HTTP proxy manipulation and XSS attacks. It includes a sample URL demonstrating the vulnerability but lacks functional exploit code.

Description

mysource 2.14.8/2.16 - Multiple Vulnerabilities

Exploits (1)

exploitdb WRITEUP VERIFIED
by Patrick Webster · textwebappsphp
https://www.exploit-db.com/exploits/28646

The provided text describes multiple input-validation vulnerabilities in MySource products, allowing HTTP proxy manipulation and XSS attacks. It includes a sample URL demonstrating the vulnerability but lacks functional exploit code.

Classification
Writeup 90%
Attack Type
Xss | Ssrf
Complexity
Trivial
Reliability
Theoretical
Target: MySource Matrix 3.8 and earlier, MySource 2.x
No auth needed
Prerequisites: Access to the vulnerable application URL
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026