EIP-2026-100013

The exploit leverages a command injection vulnerability in the pfdispaly.cgi CGI program on IRIX systems. By appending a newline and arbitrary command to the query string, an attacker can execute system commands, such as spawning an xterm to a remote display.