EIP-2026-118421

PRE-CVE

Disk Savvy Enterprise 9.1.14 - 'Login' Remote Buffer Overflow

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118421. PoCs published by Tulpa.

AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Disk Savvy Enterprise 9.1.14, leveraging a crafted HTTP POST request to the login endpoint to achieve remote code execution (RCE) with NT AUTHORITY\SYSTEM privileges. The payload includes a meterpreter reverse shell, SEH overwrite, and egghunter to bypass space constraints.

Description

Disk Savvy Enterprise 9.1.14 - 'Login' Remote Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED
by Tulpa · pythonremotewindows
https://www.exploit-db.com/exploits/40834

This exploit demonstrates a buffer overflow vulnerability in Disk Savvy Enterprise 9.1.14, leveraging a crafted HTTP POST request to the login endpoint to achieve remote code execution (RCE) with NT AUTHORITY\SYSTEM privileges. The payload includes a meterpreter reverse shell, SEH overwrite, and egghunter to bypass space constraints.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Disk Savvy Enterprise 9.1.14
No auth needed
Prerequisites: Network access to the target system · Target running Disk Savvy Enterprise 9.1.14
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026