EIP-2026-117396

PRE-CVE

LaborOfficeFree 19.10 - MySQL Root Password Calculator

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117396. PoCs published by Peter Gabaldon.

AI-analyzed exploit summary This script calculates the MySQL root password for LaborOfficeFree 19.10 by reversing the algorithm used by the software, which derives the password from a hardcoded string and a constant array. The exploit leverages the predictable password generation to gain unauthorized access to the MySQL instance running as SYSTEM.

Description

LaborOfficeFree 19.10 - MySQL Root Password Calculator

Exploits (1)

exploitdb WORKING POC
by Peter Gabaldon · pythonlocalwindows
https://www.exploit-db.com/exploits/51894

This script calculates the MySQL root password for LaborOfficeFree 19.10 by reversing the algorithm used by the software, which derives the password from a hardcoded string and a constant array. The exploit leverages the predictable password generation to gain unauthorized access to the MySQL instance running as SYSTEM.

Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: LaborOfficeFree 19.10
No auth needed
Prerequisites: Installation of LaborOfficeFree 19.10 · Access to the system where LaborOfficeFree is installed
devstral-2 · analyzed Feb 19, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026