EIP-2026-101241

This document details a hardcoded backdoor in D-Link DNS-320L ShareCenter firmware < 1.06, allowing authentication bypass with credentials 'mydlinkBRionyg' and 'abc12345cba'. It also describes a command injection vulnerability to achieve remote root shell access via log poisoning and PHP shell creation.