EIP-2026-119297

PRE-CVE

Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow (2)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119297. PoCs published by class101.

AI-analyzed exploit summary This exploit targets a remote buffer overflow vulnerability in BadBlue Easy File Sharing Web Server v2.5 (and below) by sending a crafted GET request with an oversized parameter to overwrite the EIP and execute arbitrary shellcode. The exploit includes XOR-encoded shellcode and supports multiple Windows targets (Win2k, WinXP, Win2003) with bind/reverse shell options.

Description

Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow (2)

Exploits (1)

exploitdb WORKING POC VERIFIED
by class101 · cremotewindows
https://www.exploit-db.com/exploits/25167

This exploit targets a remote buffer overflow vulnerability in BadBlue Easy File Sharing Web Server v2.5 (and below) by sending a crafted GET request with an oversized parameter to overwrite the EIP and execute arbitrary shellcode. The exploit includes XOR-encoded shellcode and supports multiple Windows targets (Win2k, WinXP, Win2003) with bind/reverse shell options.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: BadBlue Easy File Sharing Web Server v2.5 and below
No auth needed
Prerequisites: Network access to the target server · Target running vulnerable BadBlue version
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026