EIP-2026-109988

PRE-CVE

Nuked-klaN 1.7.6 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109988. PoCs published by Charles Fol.

AI-analyzed exploit summary This PHP script exploits multiple vulnerabilities in Nuked-Klan <= 1.7.6, including SQL injection for session/UID extraction, remote code execution, and file upload. It supports various attack modes and authentication bypass techniques.

Description

Nuked-klaN 1.7.6 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by Charles Fol · phpwebappsphp
https://www.exploit-db.com/exploits/5339

This PHP script exploits multiple vulnerabilities in Nuked-Klan <= 1.7.6, including SQL injection for session/UID extraction, remote code execution, and file upload. It supports various attack modes and authentication bypass techniques.

Classification
Working Poc 95%
Attack Type
Sqli | Rce | Info Leak | Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Nuked-Klan <= 1.7.6
No auth needed
Prerequisites: Target URL · Optional admin/user credentials · Optional proxy settings
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026