EIP-2026-100679

This exploit leverages a PATH-based command injection vulnerability in bmon < 1.2.1_2 on FreeBSD/OpenBSD. It creates a malicious 'netstat' script in /tmp, which is executed due to bmon's insecure use of popen() without an absolute path.