EIP-2026-101156

This exploit demonstrates an authenticated remote code execution vulnerability in Anevia Flamingo XL 3.6.20. The attacker injects arbitrary commands via the 'ntp' parameter in a POST request to '/admin/time.php', leading to command execution with root privileges.