EIP-2026-112580

PRE-CVE

TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Credential Dump

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112580. PoCs published by bhamb.

AI-analyzed exploit summary The exploit dumps encrypted user credentials from Team Helpdesk's Customer Web Service (CWS) and Technician Web Access (TWA) by leveraging an unspecified vulnerability. It requires a separate decryption script to retrieve plaintext passwords.

Description

TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Credential Dump

Exploits (1)

exploitdb WORKING POC
by bhamb · textwebappsphp
https://www.exploit-db.com/exploits/33195

The exploit dumps encrypted user credentials from Team Helpdesk's Customer Web Service (CWS) and Technician Web Access (TWA) by leveraging an unspecified vulnerability. It requires a separate decryption script to retrieve plaintext passwords.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Team Helpdesk 8.3.5 (and prior)
No auth needed
Prerequisites: Network access to the target Team Helpdesk instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026