EIP-2026-101373

This exploit demonstrates a command injection vulnerability in the Netgear D6300B router by injecting a semicolon followed by the 'ls' command into the 'IPAddr4' parameter of a POST request to '/diag.cgi'. The response includes the output of the 'ls' command, confirming arbitrary command execution.