Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-117393. PoCs published by bzyo.
AI-analyzed exploit summary This exploit leverages insecure file permissions in LabF nfsAxe 3.7's default installation directory under C:\Users\Public\ to replace the xsetsrv.exe service binary with a malicious executable, achieving Local System privilege escalation upon service restart.
Description
LabF nfsAxe 3.7 - Privilege Escalation
Exploits (1)
exploitdb
WORKING POC
by bzyo · textlocalwindows
https://www.exploit-db.com/exploits/44342
This exploit leverages insecure file permissions in LabF nfsAxe 3.7's default installation directory under C:\Users\Public\ to replace the xsetsrv.exe service binary with a malicious executable, achieving Local System privilege escalation upon service restart.
Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target:
LabF nfsAxe 3.7
Auth required
Prerequisites:
Access to a low-privileged user account on the target system · Public Folder sharing enabled on Windows 7 · Default installation path of LabF nfsAxe 3.7
MITRE ATT&CK
devstral-2 · analyzed Feb 19, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026