EIP-2026-118655

PRE-CVE

httpdx 0.8 - FTP Server Delete/Get/Create Directories/Files

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118655. PoCs published by Jonathan Salwan.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Httpdx Server FTP v0.8, allowing arbitrary file and directory manipulation via FTP commands (DELE, RETR, MKD, RMD). The PoC authenticates with provided credentials and sends crafted requests to exploit the vulnerability.

Description

httpdx 0.8 - FTP Server Delete/Get/Create Directories/Files

Exploits (1)

exploitdb WORKING POC VERIFIED
by Jonathan Salwan · cremotewindows
https://www.exploit-db.com/exploits/8897

This exploit demonstrates a directory traversal vulnerability in Httpdx Server FTP v0.8, allowing arbitrary file and directory manipulation via FTP commands (DELE, RETR, MKD, RMD). The PoC authenticates with provided credentials and sends crafted requests to exploit the vulnerability.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Httpdx Server FTP v0.8
Auth required
Prerequisites: network access to the FTP service · valid or guessable credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026