EIP-2026-117655

PRE-CVE

MUSE 4.9.0.006 - '.pls' Universal Local Buffer Overflow (SEH)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117655. PoCs published by Glafkos Charalambous.

AI-analyzed exploit summary This exploit demonstrates a local buffer overflow vulnerability in MUSE v4.9.0.006 via a crafted .pls file. It leverages SEH overwrite with a universal return address and includes a Metasploit-generated calc.exe payload.

Description

MUSE 4.9.0.006 - '.pls' Universal Local Buffer Overflow (SEH)

Exploits (1)

exploitdb WORKING POC VERIFIED
by Glafkos Charalambous · pythonlocalwindows
https://www.exploit-db.com/exploits/14664

This exploit demonstrates a local buffer overflow vulnerability in MUSE v4.9.0.006 via a crafted .pls file. It leverages SEH overwrite with a universal return address and includes a Metasploit-generated calc.exe payload.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: MUSE v4.9.0.006
No auth needed
Prerequisites: Local access to the target system · Ability to deliver the crafted .pls file
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026