EIP-2026-116817

PRE-CVE

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-116817. PoCs published by LiquidWorm.

AI-analyzed exploit summary The vulnerability involves improper file permissions on 'RichClient.exe' and 'fxclient.exe', allowing any user to replace these binaries with malicious executables, leading to local privilege escalation upon reboot.

Description

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation

Exploits (1)

exploitdb WRITEUP

by LiquidWorm · textlocalwindows

https://www.exploit-db.com/exploits/31460

View Code ZIP pw:eip

The vulnerability involves improper file permissions on 'RichClient.exe' and 'fxclient.exe', allowing any user to replace these binaries with malicious executables, leading to local privilege escalation upon reboot.

Classification

Writeup 100%

Attack Type

Lpe

Complexity

Trivial

Reliability

Reliable

Target: Asseco SEE iBank FX Client <= 2.0.9.3

No auth needed

Prerequisites: Local access to the system · Ability to replace executable files

MITRE ATT&CK

T1548.002 - Bypass User Account Control T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026