EIP-2026-118456

PRE-CVE

Easy File Management Web Server 5.3 - 'UserID' Remote Buffer Overflow (ROP)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118456. PoCs published by Julien Ahrens.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Easy File Management Web Server v5.3 via an oversized UserID cookie. It uses ROP (Return-Oriented Programming) techniques to achieve reliable code execution, bypassing stack address brute-forcing by leveraging addresses from the .text segment.

Description

Easy File Management Web Server 5.3 - 'UserID' Remote Buffer Overflow (ROP)

Exploits (1)

exploitdb WORKING POC VERIFIED

by Julien Ahrens · pythonremotewindows

https://www.exploit-db.com/exploits/33610

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Easy File Management Web Server v5.3 via an oversized UserID cookie. It uses ROP (Return-Oriented Programming) techniques to achieve reliable code execution, bypassing stack address brute-forcing by leveraging addresses from the .text segment.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Easy File Management Web Server v5.3

No auth needed

Prerequisites: Network access to the target server · Target server running Easy File Management Web Server v5.3

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026