Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112462. PoCs published by bRpsd.
AI-analyzed exploit summary This is a technical writeup detailing multiple vulnerabilities in Subrion CMS 3.X.X, including unauthorized password reset, arbitrary file download, and plugin installation. It provides specific file paths and methods but does not include functional exploit code.
Description
Subrion 3.x - Multiple Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
by bRpsd · textwebappsphp
https://www.exploit-db.com/exploits/38525
This is a technical writeup detailing multiple vulnerabilities in Subrion CMS 3.X.X, including unauthorized password reset, arbitrary file download, and plugin installation. It provides specific file paths and methods but does not include functional exploit code.
Classification
Writeup 90%
Attack Type
Auth Bypass | Info Leak | Other
Complexity
Trivial
Reliability
Reliable
Target:
Subrion CMS 3.X.X
No auth needed
Prerequisites:
Access to the installation directory
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026