EIP-2026-111985
PRE-CVESentrifugo Version 3.2 - 'announcements' Remote Code Execution (Authenticated)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111985. PoCs published by Fatih Çelik.
AI-analyzed exploit summary This exploit targets Sentrifugo 3.2, leveraging an authenticated file upload vulnerability in the 'announcements' feature to achieve remote code execution. It uploads a PHP shell disguised as an image, then triggers it to establish a reverse shell.
Description
Sentrifugo Version 3.2 - 'announcements' Remote Code Execution (Authenticated)
Exploits (1)
exploitdb
WORKING POC
by Fatih Çelik · pythonwebappsphp
https://www.exploit-db.com/exploits/48998
This exploit targets Sentrifugo 3.2, leveraging an authenticated file upload vulnerability in the 'announcements' feature to achieve remote code execution. It uploads a PHP shell disguised as an image, then triggers it to establish a reverse shell.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
Sentrifugo 3.2
Auth required
Prerequisites:
Valid credentials for Sentrifugo 3.2 · Network access to the target · Attacker-controlled listener for reverse shell
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026