EIP-2026-119336

PRE-CVE

Zervit Web Server 0.4 - Source Disclosure/Download

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119336. PoCs published by Dr_IDE.

AI-analyzed exploit summary The document describes a source disclosure vulnerability in zervit Web Server v0.4, where appending '%20' to a URL allows remote attackers to download the source code of files. The vulnerability is demonstrated with specific HTTP request examples.

Description

Zervit Web Server 0.4 - Source Disclosure/Download

Exploits (1)

exploitdb WRITEUP VERIFIED
by Dr_IDE · textremotewindows
https://www.exploit-db.com/exploits/12581

The document describes a source disclosure vulnerability in zervit Web Server v0.4, where appending '%20' to a URL allows remote attackers to download the source code of files. The vulnerability is demonstrated with specific HTTP request examples.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: zervit Web Server v0.4
No auth needed
Prerequisites: Network access to the target server · zervit Web Server v0.4 running with directory listing enabled or disabled
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026