Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109880. PoCs published by brain[pillow].
AI-analyzed exploit summary The exploit demonstrates SQL injection and remote code execution vulnerabilities in NetCat CMS. It includes specific payloads for SQLi via union-based injection and RCE via template injection, along with RFI vectors targeting vulnerable include statements.
Description
NetCat CMS - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
by brain[pillow] · textwebappsphp
https://www.exploit-db.com/exploits/17823
The exploit demonstrates SQL injection and remote code execution vulnerabilities in NetCat CMS. It includes specific payloads for SQLi via union-based injection and RCE via template injection, along with RFI vectors targeting vulnerable include statements.
Classification
Working Poc 90%
Attack Type
Rce | Sqli
Complexity
Trivial
Reliability
Reliable
Target:
NetCat CMS (version unknown)
No auth needed
Prerequisites:
Access to the vulnerable NetCat CMS instance
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026