EIP-2026-118643
PRE-CVEHosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118643. PoCs published by small mouse.
AI-analyzed exploit summary This is a vulnerability writeup describing information disclosure vulnerabilities in Hosting Controller. It details paths to sensitive files that can be accessed to enumerate domain names and disclose administrator email addresses.
Description
Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by small mouse · textremotewindows
https://www.exploit-db.com/exploits/25194
This is a vulnerability writeup describing information disclosure vulnerabilities in Hosting Controller. It details paths to sensitive files that can be accessed to enumerate domain names and disclose administrator email addresses.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Hosting Controller 6.1 Hotfix 1.7
No auth needed
Prerequisites:
network access to the target server
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026