EIP-2026-119176

PRE-CVE

SupportSoft DNA Editor Module - 'dnaedit.dll' Code Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119176. PoCs published by Nine:Situations:Group.

AI-analyzed exploit summary This exploit leverages an insecure method (PackageFiles) in the SupportSoft DNA Editor ActiveX control (dnaedit.dll v6.9.2205) to achieve remote code execution via script injection and directory traversal. The PoC injects VBScript into a system file (msinfo.htm) and triggers execution via the Help and Support Center Service.

Description

SupportSoft DNA Editor Module - 'dnaedit.dll' Code Execution

Exploits (1)

exploitdb WORKING POC VERIFIED
by Nine:Situations:Group · htmlremotewindows
https://www.exploit-db.com/exploits/8160

This exploit leverages an insecure method (PackageFiles) in the SupportSoft DNA Editor ActiveX control (dnaedit.dll v6.9.2205) to achieve remote code execution via script injection and directory traversal. The PoC injects VBScript into a system file (msinfo.htm) and triggers execution via the Help and Support Center Service.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205)
No auth needed
Prerequisites: Victim must use IE6/7 with the vulnerable ActiveX control installed · ActiveX control must be marked as safe for scripting
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026