EIP-2026-118442

PRE-CVE

Dup Scout Enterprise 9.1.14 - 'Login' Remote Buffer Overflow

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118442. PoCs published by Tulpa.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Dup Scout Enterprise 9.1.14, leveraging a crafted HTTP POST request to achieve remote code execution (RCE) with NT AUTHORITY\SYSTEM privileges. It uses a SEH-based exploit with an egghunter and Meterpreter shellcode to bypass bad characters and execute arbitrary code.

Description

Dup Scout Enterprise 9.1.14 - 'Login' Remote Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED
by Tulpa · pythonremotewindows
https://www.exploit-db.com/exploits/40832

This exploit targets a buffer overflow vulnerability in Dup Scout Enterprise 9.1.14, leveraging a crafted HTTP POST request to achieve remote code execution (RCE) with NT AUTHORITY\SYSTEM privileges. It uses a SEH-based exploit with an egghunter and Meterpreter shellcode to bypass bad characters and execute arbitrary code.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Dup Scout Enterprise 9.1.14
No auth needed
Prerequisites: Network access to the target system · Target running Dup Scout Enterprise 9.1.14 on Windows 7 x86
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026