EIP-2026-118651

PRE-CVE

HTTP File Server 2.2 - Security Bypass / Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118651. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided text describes two vulnerabilities in HTTP File Server: a security-bypass issue allowing access to restricted directories via null byte injection and a denial-of-service issue via malformed search queries. No actual exploit code is present.

Description

HTTP File Server 2.2 - Security Bypass / Denial of Service

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textremotewindows
https://www.exploit-db.com/exploits/33841

The provided text describes two vulnerabilities in HTTP File Server: a security-bypass issue allowing access to restricted directories via null byte injection and a denial-of-service issue via malformed search queries. No actual exploit code is present.

Classification
Writeup 90%
Attack Type
Auth Bypass | Dos
Complexity
Trivial
Reliability
Theoretical
Target: HTTP File Server (version unspecified)
No auth needed
Prerequisites: Network access to the target HTTP File Server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026