EIP-2026-115053

PRE-CVE

Cisco AnyConnect Secure Mobility 2.x/3.x/4.x - Client Denial of Service (PoC)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-115053. PoCs published by LiquidWorm.

AI-analyzed exploit summary This is a technical writeup detailing a stack buffer overflow vulnerability in Cisco AnyConnect Secure Mobility Client's VPN API. The analysis includes crash logs, memory dumps, and a timeline of vendor communication, demonstrating the vulnerability's root cause and impact.

Description

Cisco AnyConnect Secure Mobility 2.x/3.x/4.x - Client Denial of Service (PoC)

Exploits (1)

exploitdb WRITEUP
by LiquidWorm · htmldoswindows
https://www.exploit-db.com/exploits/37287

This is a technical writeup detailing a stack buffer overflow vulnerability in Cisco AnyConnect Secure Mobility Client's VPN API. The analysis includes crash logs, memory dumps, and a timeline of vendor communication, demonstrating the vulnerability's root cause and impact.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Cisco AnyConnect Secure Mobility Client (versions 2.x, 3.0, 3.1.x, 4.0.x, 4.1.x)
No auth needed
Prerequisites: Network access to the target system · Ability to send crafted input to the VPN API
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026