EIP-2026-117675

PRE-CVE

NetcPlus SmartServer3 3.75 - Weak Encryption

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117675. PoCs published by Steven Alexander.

AI-analyzed exploit summary This exploit decrypts weakly encrypted passwords stored in SmartServer3's dialsrv.ini file. It uses a known encryption scheme to reverse the obfuscated credentials, allowing an authenticated user to recover plaintext passwords.

Description

NetcPlus SmartServer3 3.75 - Weak Encryption

Exploits (1)

exploitdb WORKING POC VERIFIED
by Steven Alexander · clocalwindows
https://www.exploit-db.com/exploits/20407

This exploit decrypts weakly encrypted passwords stored in SmartServer3's dialsrv.ini file. It uses a known encryption scheme to reverse the obfuscated credentials, allowing an authenticated user to recover plaintext passwords.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: SmartServer3 (version not specified)
Auth required
Prerequisites: Access to the dialsrv.ini file · Authenticated user privileges on the system
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026