Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-117722. PoCs published by boku.
AI-analyzed exploit summary This exploit demonstrates a local privilege escalation (LPE) in OpenTFTP Server v1.66 by replacing the service binary due to insecure file permissions. The attacker compiles a malicious binary to add an admin user and restores the original service binary.
Description
OpenTFTP 1.66 - Local Privilege Escalation
Exploits (1)
exploitdb
WORKING POC
by boku · textlocalwindows
https://www.exploit-db.com/exploits/48060
This exploit demonstrates a local privilege escalation (LPE) in OpenTFTP Server v1.66 by replacing the service binary due to insecure file permissions. The attacker compiles a malicious binary to add an admin user and restores the original service binary.
Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target:
OpenTFTP Server v1.66
Auth required
Prerequisites:
Local access to the system · OpenTFTP Server v1.66 installed with default permissions
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026