EIP-2026-101240

This exploit leverages an authenticated configuration backup restoration vulnerability in D-Link DNR-322L devices to inject a reverse shell payload into the rc.init.sh script, which executes upon device reboot. The PoC automates login, backup download, payload injection, and restoration.