Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-118302. PoCs published by basher13.
AI-analyzed exploit summary This exploit targets a command validation vulnerability in Baby Web Server, using a crafted HTTP PUT request with embedded shellcode to achieve remote code execution. The shellcode is designed to bind a shell on the target system.
Description
Baby Web Server 2.6.2 - Command Validation
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by basher13 · perlremotewindows
https://www.exploit-db.com/exploits/1099
This exploit targets a command validation vulnerability in Baby Web Server, using a crafted HTTP PUT request with embedded shellcode to achieve remote code execution. The shellcode is designed to bind a shell on the target system.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Baby Web Server (version unspecified)
No auth needed
Prerequisites:
Network access to the target server · Baby Web Server running on the target
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026