EIP-2026-112854

PRE-CVE

Uebimiau Web-Mail 3.2.0-1.8 - Remote File / Overwrite

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112854. PoCs published by GoLd_M.

AI-analyzed exploit summary This exploit demonstrates a remote file overwrite vulnerability in Uebimiau Webmail <= v3.2.0-1.8, allowing an attacker to write arbitrary PHP code to a file and execute system commands via a crafted GET request.

Description

Uebimiau Web-Mail 3.2.0-1.8 - Remote File / Overwrite

Exploits (1)

exploitdb WORKING POC VERIFIED

by GoLd_M · textwebappsphp

https://www.exploit-db.com/exploits/8944

View Code ZIP pw:eip

This exploit demonstrates a remote file overwrite vulnerability in Uebimiau Webmail <= v3.2.0-1.8, allowing an attacker to write arbitrary PHP code to a file and execute system commands via a crafted GET request.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Uebimiau Webmail v3.2.0-1.8

No auth needed

Prerequisites: Access to the target web application · Ability to send HTTP GET requests

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026