EIP-2026-100907

This exploit leverages an unsanitized input vulnerability in Synology StorageManager's smart.cgi to achieve remote command execution as root via command injection. The PoC demonstrates chaining commands using backticks to execute arbitrary commands on the target system.