EIP-2026-118669

PRE-CVE

IBM Tivoli Endpoint 4.1.1 - Remote SYSTEM

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118669. PoCs published by Jeremy Brown.

AI-analyzed exploit summary This exploit targets IBM Tivoli Endpoint 4.1.1 by leveraging a stack-based buffer overflow in the HTTP request parsing logic, combined with hardcoded Base64 credentials. It delivers a reverse TCP shell payload to achieve remote code execution.

Description

IBM Tivoli Endpoint 4.1.1 - Remote SYSTEM

Exploits (1)

exploitdb WORKING POC
by Jeremy Brown · pythonremotewindows
https://www.exploit-db.com/exploits/17365

This exploit targets IBM Tivoli Endpoint 4.1.1 by leveraging a stack-based buffer overflow in the HTTP request parsing logic, combined with hardcoded Base64 credentials. It delivers a reverse TCP shell payload to achieve remote code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: IBM Tivoli Endpoint 4.1.1
No auth needed
Prerequisites: Network access to target on port 9495 · Target running IBM Tivoli Endpoint 4.1.1
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026