EIP-2026-100941

The exploit demonstrates command injection vulnerabilities in ZamFoo via two CGI endpoints, allowing arbitrary command execution (e.g., `rm -rf`) by manipulating the `accounttorestore` and `accounttochange` parameters. No authentication is required, and the payloads are straightforward command injection examples.