EIP-2026-115258

PRE-CVE

FlashGet 3.x - IEHelper Remote Execution (PoC)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-115258. PoCs published by superli.

AI-analyzed exploit summary This exploit leverages a remote code execution vulnerability in FlashGet 3.x via an ActiveX control (CLSID: {C6262DCE-6E64-45D2-B080-801F1E298AC2}) to execute arbitrary code on the target system. The PoC is a simple HTML object tag that triggers the vulnerability when rendered in Internet Explorer.

Description

FlashGet 3.x - IEHelper Remote Execution (PoC)

Exploits (1)

exploitdb WORKING POC
by superli · textdoswindows
https://www.exploit-db.com/exploits/11021

This exploit leverages a remote code execution vulnerability in FlashGet 3.x via an ActiveX control (CLSID: {C6262DCE-6E64-45D2-B080-801F1E298AC2}) to execute arbitrary code on the target system. The PoC is a simple HTML object tag that triggers the vulnerability when rendered in Internet Explorer.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: FlashGet 3.x
No auth needed
Prerequisites: Target must have FlashGet 3.x installed · Target must be using Internet Explorer · ActiveX controls must be enabled
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026