Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-115261. PoCs published by Kurono.
AI-analyzed exploit summary This exploit demonstrates a remote format string vulnerability in Flightgear versions 2.0 and 2.4. It sends maliciously crafted format strings to the Flightgear property tree via a network socket, potentially allowing arbitrary memory manipulation or code execution.
Description
Flightgear 2.0/2.4 - Remote Format String
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Kurono · cdoswindows
https://www.exploit-db.com/exploits/24972
This exploit demonstrates a remote format string vulnerability in Flightgear versions 2.0 and 2.4. It sends maliciously crafted format strings to the Flightgear property tree via a network socket, potentially allowing arbitrary memory manipulation or code execution.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Flightgear 2.0, 2.4
No auth needed
Prerequisites:
Flightgear running with remote control enabled (e.g., --telnet or --props flag) · Network access to the target
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026