Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111730. PoCs published by shyamkumar somana.
AI-analyzed exploit summary The document describes a privilege escalation vulnerability in RedaxScript 2.1.0 due to improper access controls and input validation. An attacker can escalate privileges by tampering with the 'groups[]' parameter in an account update request.
Description
RedaxScript 2.1.0 - Privilege Escalation
Exploits (1)
exploitdb
WRITEUP
by shyamkumar somana · textwebappsphp
https://www.exploit-db.com/exploits/35840
The document describes a privilege escalation vulnerability in RedaxScript 2.1.0 due to improper access controls and input validation. An attacker can escalate privileges by tampering with the 'groups[]' parameter in an account update request.
Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
RedaxScript 2.1.0
Auth required
Prerequisites:
Valid non-admin user account · Access to the account update functionality
MITRE ATT&CK
mistral-large-3 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026