EIP-2026-118664

PRE-CVE

IBM ACPRunner 1.2.5 - ActiveX Control Dangerous Method

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118664. PoCs published by eEye Digital Security Team.

AI-analyzed exploit summary This exploit leverages dangerous methods in the IBM acpRunner ActiveX control to silently download and execute a malicious executable on a victim's system. The PoC demonstrates how an attacker can abuse the DownLoadURL and SaveFilePath properties to achieve remote code execution.

Description

IBM ACPRunner 1.2.5 - ActiveX Control Dangerous Method

Exploits (1)

exploitdb WORKING POC VERIFIED
by eEye Digital Security Team · textremotewindows
https://www.exploit-db.com/exploits/24219

This exploit leverages dangerous methods in the IBM acpRunner ActiveX control to silently download and execute a malicious executable on a victim's system. The PoC demonstrates how an attacker can abuse the DownLoadURL and SaveFilePath properties to achieve remote code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: IBM acpRunner ActiveX control
No auth needed
Prerequisites: Victim must have the vulnerable IBM acpRunner ActiveX control installed · Victim must visit a malicious webpage hosting the exploit
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026