EIP-2026-114688
PRE-CVEQNX 6.5.0 x86 io-graphics - Local Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114688. PoCs published by cenobyte.
AI-analyzed exploit summary This is a functional return-to-libc exploit targeting a buffer overflow in QNX's io-graphics via the PHOTON2_HOME environment variable. It leverages dlsym() to retrieve libc addresses and searches memory for /bin/sh to achieve local privilege escalation.
Description
QNX 6.5.0 x86 io-graphics - Local Privilege Escalation
Exploits (1)
exploitdb
WORKING POC
by cenobyte · clocalqnx
https://www.exploit-db.com/exploits/32154
This is a functional return-to-libc exploit targeting a buffer overflow in QNX's io-graphics via the PHOTON2_HOME environment variable. It leverages dlsym() to retrieve libc addresses and searches memory for /bin/sh to achieve local privilege escalation.
Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target:
QNX 6.5.0, 6.4.1 (io-graphics)
No auth needed
Prerequisites:
Local access to a vulnerable QNX system · Presence of /usr/photon/bin/io-graphics
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026