EIP-2026-101403

This exploit targets an unauthenticated command injection vulnerability in Osprey Pump Controller 1.0.1, allowing remote code execution with www-data permissions via multiple vectors including DataLogView.php and index.php. It establishes a reverse shell using Python's socket and subprocess modules.