EIP-2026-101424

This exploit demonstrates a Man-in-The-Middle (MiTM) attack against Ruijie Reyee Wireless Router firmware B11P204, leveraging unencrypted CWMP polling requests to inject arbitrary commands via a fake server. The PoC includes a custom HTTP server that intercepts device requests and responds with malicious SOAP payloads to achieve RCE.