EIP-2026-100061

This exploit demonstrates a Remote Code Execution (RCE) vulnerability in the Australian Education App (v6) due to the use of `addJavascriptInterface()` in an older Android API version. An attacker can register the domain `tsearch.com.au` and serve malicious JavaScript to execute arbitrary commands on the victim's device.