Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-117127. PoCs published by SajjadBnd.
AI-analyzed exploit summary This exploit demonstrates insecure file permissions in EmEditor 19.8, allowing any user to replace executable files or perform DLL hijacking to escalate privileges to SYSTEM or Administrator.
Description
EmEditor 19.8 - Insecure File Permissions
Exploits (1)
exploitdb
WORKING POC
by SajjadBnd · textlocalwindows
https://www.exploit-db.com/exploits/48398
This exploit demonstrates insecure file permissions in EmEditor 19.8, allowing any user to replace executable files or perform DLL hijacking to escalate privileges to SYSTEM or Administrator.
Classification
Working Poc 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target:
EmEditor 19.8
No auth needed
Prerequisites:
Local access to the system · EmEditor 19.8 installed with default permissions
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026