EIP-2026-101286

This Metasploit module exploits an unauthenticated command injection vulnerability in Fritz!Box devices via the `/cgi-bin/webcm` endpoint. It uses a crafted `var:lang` parameter to execute arbitrary commands, leading to remote code execution (RCE) on affected devices.