EIP-2026-100718

This Metasploit module exploits a remote command execution vulnerability in IPFire's proxy.cgi page by injecting a payload into the NCSA_PASS parameter during user creation. The exploit leverages command injection to achieve RCE on vulnerable versions of IPFire.