EIP-2026-114586

PRE-CVE

ZeeNetworking 1x - Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114586. PoCs published by SONIC.

AI-analyzed exploit summary This is a technical writeup describing an arbitrary file upload vulnerability in ZeeNetworking v1x. The vulnerability allows attackers to upload arbitrary files by exploiting the member_photo.php endpoint, potentially leading to remote code execution.

Description

ZeeNetworking 1x - Arbitrary File Upload

Exploits (1)

exploitdb WRITEUP
by SONIC · textwebappsphp
https://www.exploit-db.com/exploits/14444

This is a technical writeup describing an arbitrary file upload vulnerability in ZeeNetworking v1x. The vulnerability allows attackers to upload arbitrary files by exploiting the member_photo.php endpoint, potentially leading to remote code execution.

Classification
Writeup 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: ZeeNetworking v1x
No auth needed
Prerequisites: Access to the vulnerable endpoint · Ability to craft malicious file upload requests
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026