EIP-2026-117205
PRE-CVEFrhed (Free hex editor) v1.6.0 - Buffer overflow
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117205. PoCs published by Rafael Pedrero.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow in Frhed v1.6.0 by controlling the SEH records via a long file name argument. The PoC shows how to overwrite the SEH handler at offset 494, potentially leading to arbitrary code execution.
Description
Frhed (Free hex editor) v1.6.0 - Buffer overflow
Exploits (1)
exploitdb
WORKING POC
by Rafael Pedrero · textlocalwindows
https://www.exploit-db.com/exploits/51078
This exploit demonstrates a buffer overflow in Frhed v1.6.0 by controlling the SEH records via a long file name argument. The PoC shows how to overwrite the SEH handler at offset 494, potentially leading to arbitrary code execution.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Frhed (Free hex editor) v1.6.0
No auth needed
Prerequisites:
Frhed v1.6.0 installed on Windows · Command-line access to execute Frhed.exe with a long argument
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026