EIP-2026-118085

PRE-CVE

VX Search 10.2.14 - 'Proxy' Local Buffer Overflow (SEH)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118085. PoCs published by wetw0rk.

AI-analyzed exploit summary This exploit targets a local SEH overflow in VXSearch v10.2.14, leveraging a custom alphanumeric bind shell to achieve remote code execution. The payload is designed to trigger via the Proxy Host Name field in the application's Advanced Options.

Description

VX Search 10.2.14 - 'Proxy' Local Buffer Overflow (SEH)

Exploits (1)

exploitdb WORKING POC VERIFIED
by wetw0rk · pythonlocalwindows
https://www.exploit-db.com/exploits/43156

This exploit targets a local SEH overflow in VXSearch v10.2.14, leveraging a custom alphanumeric bind shell to achieve remote code execution. The payload is designed to trigger via the Proxy Host Name field in the application's Advanced Options.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: VXSearch v10.2.14
No auth needed
Prerequisites: Local access to the vulnerable application · Ability to input malicious data into the Proxy Host Name field
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026