EIP-2026-100666

This exploit leverages an authenticated XSLT injection vulnerability in Umbraco CMS 7.12.4 to achieve remote code execution. It authenticates, crafts a malicious XSLT payload with embedded C# code, and submits it to the vulnerable endpoint to execute arbitrary commands.