Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-117164. PoCs published by Nathaniel Carew.
AI-analyzed exploit summary The advisory details a privilege escalation vulnerability in FileBound On-Site, where an authenticated user can reset the password of any local user by modifying the UserID value in a SOAP request to the SetPassword2 web service method.
Description
FileBound 6.2 - Local Privilege Escalation
Exploits (1)
exploitdb
WRITEUP
by Nathaniel Carew · textlocalwindows
https://www.exploit-db.com/exploits/21892
The advisory details a privilege escalation vulnerability in FileBound On-Site, where an authenticated user can reset the password of any local user by modifying the UserID value in a SOAP request to the SetPassword2 web service method.
Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
FileBound On-Site (versions prior to 6.2)
Auth required
Prerequisites:
Valid credentials for authentication
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026