Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-113137. PoCs published by i-Hmx.
AI-analyzed exploit summary This is a writeup describing a local file inclusion (LFI) vulnerability in VoipNow versions prior to 2.5.0. The vulnerability allows an attacker to read arbitrary files, including sensitive configuration files, and potentially gain shell access by poisoning log files.
Description
VoipNow 2.5 - Local File Inclusion
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by i-Hmx · textwebappsphp
https://www.exploit-db.com/exploits/24973
This is a writeup describing a local file inclusion (LFI) vulnerability in VoipNow versions prior to 2.5.0. The vulnerability allows an attacker to read arbitrary files, including sensitive configuration files, and potentially gain shell access by poisoning log files.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
VoipNow < 2.5.0
No auth needed
Prerequisites:
Network access to the VoipNow web interface
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026