EIP-2026-100642

This exploit leverages a directory traversal vulnerability in BlogEngine.NET's file upload functionality to achieve remote code execution by uploading a malicious PostView.ascx file. The exploit includes a reverse shell payload that connects back to an attacker-controlled host.