Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-117311. PoCs published by TUNISIAN CYBER.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in Internet Download Manager (IDM) v6.20 by overwriting the EIP register with a controlled value and executing shellcode. The payload is delivered via a crafted text file pasted into the VPN/Dial-Up username field.
Description
IDM 6.20 - Local Buffer Overflow
Exploits (1)
exploitdb
WORKING POC
by TUNISIAN CYBER · pythonlocalwindows
https://www.exploit-db.com/exploits/36533
This exploit demonstrates a local buffer overflow in Internet Download Manager (IDM) v6.20 by overwriting the EIP register with a controlled value and executing shellcode. The payload is delivered via a crafted text file pasted into the VPN/Dial-Up username field.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Internet Download Manager v6.20
No auth needed
Prerequisites:
Local access to the target system · IDM v6.20 installed · Ability to paste malicious input into the VPN/Dial-Up username field
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026