EIP-2026-101254

This exploit demonstrates arbitrary file write vulnerabilities in Dixell XWEB-500 via three endpoints: logo_extra_upload.cgi, lo_utils.cgi, and cal_save.cgi. It uses curl commands to send POST requests with file content, enabling unauthorized file creation or modification.